Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-45467 | Kitploit
Tools/GitHubGitHub/zgsnj123/cve-2025-45467
Embedded Systems SecurityIoT SecurityVulnerability AnalysisExploitationInformation GatheringPenetration TestingHardware SecurityFirmware Analysis
GitHubzgsnj123/cve-2025-45467

CVE-2025-45467

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-45467: Insecure Firmware Verification in Unitree Go1

Summary

A critical vulnerability (CVE-2025-45467) has been discovered in Unitree Go1 robotic dog (all firmware versions ≤ Go1_2022_05_11), where the firmware update mechanism relies solely on insecure MD5 hash checks for integrity verification. This allows an attacker to bypass authentication checks and upload malicious firmware, leading to remote code execution, privilege escalation, and information disclosure.

Vulnerability Details

  • Vulnerability Type: Insecure Permissions
  • Impact:
    • Remote Code Execution ✅
    • Privilege Escalation ✅
    • Information Disclosure ✅
  • Attack Type: Remote (via Wi-Fi AP/client mode or Ethernet)
  • Component: /run.sh script in official firmware
  • Verification Method Used: MD5 checksum only (no signature/authentication)

Affected Products

  • Vendor: Unitree Robotics
  • Product: Unitree Go1
  • Affected Versions: All firmware versions ≤ Go1_2022_05_11
  • Firmware Package:
    Go1_2022_05_11_e0d0e617.zip

Proof of Concept (PoC)

  1. Download and extract the official firmware

    root@kitploit:~
    unzip Go1_2022_05_11_e0d0e617.zip

  2. Inspect /run.sh

  3. The script performs MD5 hash checking, without any form of digital signature or certificate validation.

  4. Modify the firmware as you want

  5. Recalculate MD5 of firmware**

  6. Upload the malicious firmware

  7. Use Wi-Fi (AP/client mode) or Ethernet to push the modified firmware to the robot.

Download Tool