AI Station firmware (RK3562) vulnerabilities

2 known vulnerabilities in AI Station firmware (RK3562) from EnergizeLab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Robot firmware (mode 104000): Download of Code Without Integrity Check

  CVE-2026-105036Oct 15, 2026EnergizeLab

  EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept o

• 8.8 High severity

  AI Station firmware (RK3562): Use of Hard-coded Credentials

  CVE-2026-105033Oct 15, 2026EnergizeLab

  The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.