Hardcoded credentials

2022-05-2617:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

CPENameOperatorVersion
kr_c4_firmwarelt8.7

CPE	Name	Operator	Version
	kr_c4_firmware	lt	8.7

References

www.cisa.gov/uscert/ics/advisories/icsa-21-208-01