EXPLOIT ALLOWS FOR TAKEOVER OF FLEETS OF UNITREE ROBOTS

Summary from the TLDR InfoSec newsletter

Security researchers discovered a wormable vulnerability in the Bluetooth Low Energy (BLE) Wi-Fi configuration interface used by several Unitree robots, which could result in remote code execution. Unitree robots utilize an initial BLE connection to facilitate the setup of a Wi-Fi connection. However, the encryption keys for the packets that the robot accepts were published on X. The researchers discovered that if an attacker encrypts the word “unitree” with these keys, the robot will allow them to inject arbitrary code masquerading as the Wi-Fi SSID and password, which will then be executed when the robot tries to connect to Wi-Fi.