CVE-2020-10286

🗓️ 15 Jul 2020 21:15:13Reported by AliasType

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2020-10286 RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS	15 Jul 202021:15	–	cvelist
EUVD	EUVD-2020-2741	7 Oct 202500:30	–	euvd
NVD	CVE-2020-10286	15 Jul 202022:15	–	nvd
OSV	CVE-2020-10286	15 Jul 202022:15	–	osv
Prion	Design/Logic Flaw	15 Jul 202022:15	–	prion

NVD

Node

ufactory xarm_5_lite_firmwareRange≤1.5.0

AND

ufactory xarm_5_liteMatch-

Node

ufactory xarm_6_firmwareMatch-

AND

ufactory xarm_6Match-

Node

ufactory xarm_7_firmwareMatch-

AND

ufactory xarm_7Match-

[
  {
    "product": "xArm 5 Lite, xArm 6 and xArm 7",
    "vendor": "uFactory",
    "versions": [
      {
        "status": "affected",
        "version": "v1.5.0 and before"
      }
    ]
  }
]

Source	Link
github	www.github.com/aliasrobotics/RVD/issues/3323

21 Nov 2024 04:55Current

8.8High risk

Vulners AI Score8.8

CVSS 25.8

CVSS 3.18.8

CVSS 39.4

EPSS0.00195