CVE-2020-10284
Critical
Description
No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.
SeverityCritical
CVSS9.1
Exploit probability—
ProductUfactory Xarm Studio
PublishedJul 15, 2020
First seenJul 15, 2020
Weakness typeCWE-656CWE-656
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ufactory xarm_studio | 1.3.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.