CVE-2020-10264

🗓️ 06 Apr 2020 12:08:40Reported by AliasType

CB3 and e-series SW Version 3.3 and up, allow authenticated access to RTDE interface on port 30004, enabling setting registers and accessing robot dat

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2020-10264 RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputs	6 Apr 202012:08	–	cvelist
EUVD	EUVD-2020-2719	7 Oct 202500:30	–	euvd
NVD	CVE-2020-10264	6 Apr 202012:15	–	nvd
Prion	Code injection	6 Apr 202012:15	–	prion

NVD

Node

universal-robots ur_softwareRange3.0.14989–3.3.3.292

AND

universal-robots ur10Match-

universal-robots ur3Match-

universal-robots ur5Match-

Node

universal-robots ur_softwareRange5.0≥

AND

universal-robots ur10eMatch-

universal-robots ur3eMatch-

universal-robots ur5eMatch-

[
  {
    "product": "Universal Robots Robot Controllers CB 3.1",
    "vendor": "Universal Robots A/S",
    "versions": [
      {
        "status": "affected",
        "version": "CB3 SW Versions 3.3 up to 3.12.1"
      }
    ]
  },
  {
    "product": "Universal Robots Robot Controllers e-Series",
    "vendor": "Universal Robots A/S",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "next of SW Versions 5.0 up to 5.7",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
universal-robots	www.universal-robots.com/how-tos-and-faqs/how-to/ur-how-tos/real-time-data-exchange-rtde-guide/

17 Jun 2026 02:47Current

8.7High risk

Vulners AI Score8.7

CVSS 25.8

CVSS 3.18.8

EPSS0.0056