HIWIN Robot System Software 安全漏洞

HIWIN Robot System Software HRSS is a type of robot system software from China's HIWIN Technology HIWIN. A security vulnerability exists in HIWIN Robot System Software, which stems from the fact that it does not properly address a terminated command source, allowing an attacker to write code to...

Improper Authorization

github.com/goharbor/harbor is vulnerable to improper authorization. A remote authenticated attacker is able to revoke the permissions or impersonate a robot account due to improper validation of the user permissions when updating the robot account through the vulnerable updateV2Robot function...

Harbor fails to validate the user permissions when updating a robot account

Impact Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to. API call: PUT /robots/robotid By sending a request that attempts to update a robot account, and specifying a robot account id and robot...

GHSA-XX9W-464F-7H6F Harbor fails to validate the user permissions when updating a robot account

Impact Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t have access to. API call: PUT /robots/robotid By sending a request that attempts to update a robot account, and specifying a robot account id and robot...

PT-2022-20880 · Harbor · Harbor

Name of the Vulnerable Software and Affected Versions: Harbor versions prior to 2.5.2 Description: The issue arises from the failure to validate user permissions when updating a robot account that belongs to a project the authenticated user doesn’t have access to. By sending a request to update a...

CVE-2022-2759

Delta Electronics Delta Robot Automation Studio DRAS versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to emb...

CVE-2022-2759

Delta Electronics Delta Robot Automation Studio DRAS versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to emb...

CVE-2022-2759

Delta Electronics DRAS (Delta Robot Automation Studio) prior to version 1.13.20 is affected by improper restriction of XML external entity references (CWE-611). The vulnerability stems from processing XML documents whose entities can resolve to URIs outside the intended scope, causing the product...

PT-2022-18509 · Delta Electronics · Delta Robot Automation Studio

Name of the Vulnerable Software and Affected Versions: Delta Electronics Delta Robot Automation Studio DRAS versions prior to 1.13.20 Description: The issue arises from improper restrictions in processing XML documents, allowing XML entities with URIs to resolve to documents outside the intended...

Delta Electronics Delta Robot Automation Studio 代码问题漏洞

Delta Electronics Delta Robot Automation Studio DRAS is industrial robot control software from Delta Electronics, a Taiwan, China-based company. A code issue vulnerability exists in Delta Electronics Delta Robot Automation Studio DRAS, which arises from the possibility that XML documents processe...

Improper access control

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled default...

CVE-2022-2242

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled default...

PT-2022-15421 · Kuka · Kuka Systemsoftware V/Kss

Name of the Vulnerable Software and Affected Versions: KUKA SystemSoftware V/KSS versions prior to 8.6.5 Description: The issue is related to improper access control, allowing an unauthorized attacker to directly read and write robot configurations when access control is not available or not...

KUKA SystemSoftware V/KSS 访问控制错误漏洞

KUKA SystemSoftware V/KSS is a robot control operating system from KUKA SystemSoftware. An Access Control Error vulnerability exists in KUKA SystemSoftware V/KSS versions prior to 8.6.5 that stems from incorrect access control. An attacker can exploit this vulnerability to directly read or write...

CVE-2022-2675 Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

Flaws in Enabot Ebo Air Home Security Robot Allowed Attackers to Spy on Users

By Deeba Ahmed If exploited, the flaw could have allowed an attacker to hijack the devices camera and microphone to spy… This is a post from HackRead.com Read the original post: Flaws in Enabot Ebo Air Home Security Robot Allowed Attackers to Spy on Users...

XXE vulnerability in Jenkins Robot Framework Plugin

Robot Framework Plugin 2.0.0 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. This allows a user able to control the input files for the 'Publish Robot Framework' post-build step to have Jenkins parse a crafted file that uses external entities for extracti...

GHSA-M53P-F25Q-Q6FG XXE vulnerability in Jenkins Robot Framework Plugin

Robot Framework Plugin 2.0.0 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. This allows a user able to control the input files for the 'Publish Robot Framework' post-build step to have Jenkins parse a crafted file that uses external entities for extracti...

GHSA-WRWF-PMMJ-W989 Observable Discrepancy in BouncyCastle

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable...

Observable Discrepancy in BouncyCastle

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable...