This vulnerability (CWE-319) affects Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook). Operator control unit to robot UDP traffic is transmitted in cleartext without cryptographic integrity protection. As a result, an adjacent attacker can intercept or modify control traffic, potentially hijacking robot operations. The CVSS 4.0 score is 8.5 (high severity), reflecting the network attack vector with low complexity and no required privileges or user interaction. The vulnerability impacts confidentiality, integrity, and availability of robot control communications.

An unauthenticated attacker with adjacent network access can intercept and modify control traffic between the operator control unit and the robot. This could lead to unauthorized control or disruption of robot operations. The vulnerability affects confidentiality, integrity, and availability of the control communications, posing significant operational risks to affected robots.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, network-level mitigations such as isolating robot control traffic to trusted networks and using VPNs or encrypted tunnels may reduce exposure. Monitor vendor channels for updates on patches or official mitigations.