RobotRisk Autonomous Systems Incident & Risk Register
RobotRisk / SoftBank Robotics / 2018-05-29
consumer robotics · cyber

Security researchers find Pepper robot lacks basic authentication/security controls

S1 · 05/29
2018 · SoftBank Robotics

Record

CompanySoftBank Robotics
Categoryconsumer robotics
Typecyber
Date05/29
2018
Time of daynot documented
Locationno physical site (recall / fleet-wide / aggregate record)
SeverityS1 (near-miss / disclosed vulnerability)
Scale-
Confidencemedium
VerificationYes - adversarially checked against the cited source
SourceThe Register

What happened

Security researchers publicly documented that the Pepper humanoid robot (Aldebaran/SoftBank Robotics) had minimal security controls, including lack of authentication on its APIs, calling it a security vulnerability rather than a caused-harm incident.

SoftBank Robotics record context

SoftBank Robotics vs consumer robotics alternatives

consumer robotics context

consumer robotics: entries by year

252018 S1: 11182020 S3: 11202021 S1: 11212022 S3: 11222023 S3: 22232024 S2: 22024 S4: 13242025 S1: 12025 S2: 23252026 S2: 12026 S3: 12026 S4: 12026 S5: 2526
S1S2S3S4S5

consumer robotics: failure modes

consumer robotics: most entries

cyber context

cyber: by category

cyber: by year

cyber: severity profile

Comparable cyber events in consumer robotics

SevDateCompanyEvent
S52026-07-13SharkNinjaShark robot vacuum flaw allows remote code execution via stolen certificate
S22026-05YarboSecurity vulnerability exposed in ~6,000 Yarbo robot lawn mowers
S22025-09-02Dreame TechnologySecurity flaws found in Dreame (and Ecovacs) robot vacuums with cameras
S12025-05EcovacsCISA advisory: Ecovacs Deebot base stations accept unvalidated firmware updates, deterministic WiFi key
S22024-08EcovacsResearchers demonstrate Bluetooth/PIN flaw letting attackers hijack Ecovacs Deebot cameras and mics
S22024-05EcovacsHacked Ecovacs Deebot X2 vacuums shout racial slurs, chase pet in multiple US cities
S12021-09-15RoborockRoborock discloses insecure random-number generator flaw in Tuya IoT cloud connection

Other SoftBank Robotics entries

Also from Critical Systems Analysis: CSA - functional safety engineering · Company directory · FSTalent - functional safety jobs