CVE-2020-10264
High
Description
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot data is also possible
SeverityHigh
CVSS8.8
Exploit probability—
ProductUniversal-robots Ur Software
PublishedApr 6, 2020
First seenApr 6, 2020
Weakness typeCWE-200Sensitive information exposure
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| universal-robots ur_software | 3.0.14989 ≤ v ≤ 3.3.3.292, 5.0 ≤ v | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.