Hard coded credentials in Yarbo app put robot telemetry at risk

The CISA advisory (ICSA-26-162-01) highlights critical vulnerabilities in the Yarbo Android/iOS mobile application and its cloud infrastructure, exposing users to risks like unauthorized access to telemetry data and command issuance of robots. Key points include:

1. **Vulnerability Summary**: Hard-coded credentials enable unauthorized access to all robot telemetry, with severe implications for security.

2. **Affected Versions**: All versions of Yarbo Android/iOS apps and current cloud infrastructure are at risk.

3. **Severity Ratings**: CVSS 3.1 score of 9.8 indicates critical risk due to hard-coded credentials and missing authorization.

4. **Recommended Action**: Users should upgrade to version 3.17.4 or later, which will implement better security measures after the update.

5. **Background**: This advisory applies to commercial facilities worldwide and was initiated due to reports from Markus Lassfolk of Truesec.