The FrodoBots EarthRover Mini+ firmware version v6.2.4_6.2.5_0.614.0 exposes sensitive credentials due to insecure storage and access mechanisms. The Wi-Fi pre-shared key (PSK) is stored in plaintext within the wpa_supplicant.conf file and can be accessed through unauthenticated API endpoints and diagnostic exports. Furthermore, unauthenticated Android Debug Bridge (ADB) access allows attackers to retrieve the /etc/shadow file, which contains hashed user passwords.