CRITICAL🇵🇱 Wersja polska

CVE-2020-10265

CVSS 9.4v3.1pub. 2020-04-06upd. 2024-11-21

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safety and more. The DashBoard server is not protected by any kind of authentication or authorization.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

  • Universal Robots Ur10

    HW
    Universal-Robots
    all versions

  • Universal Robots Ur10e

    HW
    Universal-Robots
    all versions

  • Universal Robots Ur3

    HW
    Universal-Robots
    all versions

  • Universal Robots Ur3e

    HW
    Universal-Robots
    all versions

  • Universal Robots Ur5

    HW
    Universal-Robots
    all versions

  • Universal Robots Ur5e

    HW
    Universal-Robots
    all versions

  • Universal Robots Ur Software

    APP
    Universal-Robots
    ≥ 1.43.0.14989 – 3.3.3.292≥ 5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-10264HIGH8.8same product

CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Re...

CVE-2020-10266HIGH8.1same product

UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots....

CVE-2020-10267HIGH7.5same product

Universal Robots control box CB 3.1 across firmware versions (tested on 1.12.1, 1.12, 1.11 and 1.10) does not ...

CVE-2018-10633CRITICAL9.8PL ✓same vendor

Hard-coded credentials w Universal Robots CB 3.1 umożliwiające reset hasła

CVE-2018-10635CRITICAL9.8PL ✓same vendor

Universal Robots CB 3.1 — nieautoryzowane zdalne wykonanie kodu przez porty URScript