CVE-2026-121687

Local rover interfaces exposed telemetry and motion controls

CERT/CC and FrodoBots · EarthRover Mini+ local telemetry and controls

First documented disclosure · Review checkpoint

Summary

On the tested firmware, a connected caller could access location and device information or issue control requests without individual authentication.

Severity and exploitation evidence

No CVSS score recorded in this review.

Exploitation not established: The researcher tested an owned rover. FrodoBots reports no indication that its infrastructure or a third-party device was accessed.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Several interfaces relied on local network access as the security boundary for diagnostics, telemetry or control.

Conditions required

The attacker must reach the affected local interfaces. FrodoBots says its current deployment requires proximity and access to the rover’s password-protected Wi-Fi.

Potential impact

The rover’s location and network information could be exposed and local control actions could be unauthorized. No interference with a deployed navigation model was documented.

Affected versions and configurations

EarthRover Mini+ firmware 6.2.4_6.2.5_0.614.0, the build examined by the researcher.

Fix and mitigation status

CERT/CC names no verified fixed firmware build. FrodoBots describes service-side mitigations and a progressive device update.

Practical next steps

Follow CERT/CC’s firmware update guidance, set a unique access-point password and operate the device on a trusted private network.

Operating lesson

Authorize telemetry reads and control writes separately from joining the device network.

Evidence and limits

The vendor says testing used the researcher’s own rover and reports no evidence of access to third-party devices or vendor infrastructure. Its verification was by static analysis and internal review.

Sources