VicOne finds 28 vulnerabilities in robotics software in under two days
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
SI enables much faster inspection of robotics code, but both a discovered vulnerability and the safety of its fix still need confirmation through real system behavior.
VicOne reported SI-assisted fuzzing of projects from Google, Nvidia, Meta and other participants in the physical SI ecosystem. In the company's initial validation, all 28 findings were previously unknown vulnerabilities; the final count may change after review by vendors and vulnerability authorities, and some findings do not yet have CVE identifiers. About 75% concern development, training, simulation and validation tools rather than code running on a deployed robot. In one demonstration, researchers exploited a vulnerability to prevent a robot's remote-stop command from working. The Robot Report article is sponsored content and does not identify the robot's software stack or the details of the failure chain, so the practical threat posed by each finding requires independent verification.
Sources 2