Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation.
References
| Link | Resource |
|---|---|
| https://github.com/zgsnj123/CVE-2025-45467/tree/main | Exploit Third Party Advisory |
| https://www.unitree.com/cn/go1 | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
17 Oct 2025, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Unitree go1
Unitree go1 Firmware Unitree |
|
| Summary |
|
|
| CPE | cpe:2.3:o:unitree:go1_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:unitree:go1:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/zgsnj123/CVE-2025-45467/tree/main - Exploit, Third Party Advisory | |
| References | () https://www.unitree.com/cn/go1 - Product |
25 Jul 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-276 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
25 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-25 15:15
Updated : 2025-10-17 18:42
NVD link : CVE-2025-45467
Mitre link : CVE-2025-45467
CVE.ORG link : CVE-2025-45467
JSON object : View
Products Affected
unitree
- go1
- go1_firmware
CWE
CWE-276
Incorrect Default Permissions