ai_station_firmware_rk3562 vulnerabilities
CVEs whose affected-version data names the ai_station_firmware_rk3562 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-105033High· 8.8EnergizeLab AI Station Default Root Credentials with SSH Enabled
The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.
▾ TwilightEnergizeLab · AI Station firmware (RK3562)via CVEORG
CVE-2026-105036High· 7.5EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attac…
▾ TwilightEnergizeLab · Robot firmware (mode 104000)via CVEORG