CVE Catalog
CVE-2025-60251
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk0.20%
9th percentile - higher than 9% of all known CVEs
Summary
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret containing the substring "unitree".
Risk Assessment
Weak authentication may allow unauthorized parties to establish connections and take control of the device.
Recommendation
Update Unitree device firmware to a version later than 2025-09-20 or enforce additional authentication.
Other vulnerabilities in Unitree Go2/G1/H1/B2
Original NVD description (English source)
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS