1311 matches found
KUKA SystemSoftware V/KSS 访问控制错误漏洞
KUKA SystemSoftware V/KSS is a robot control operating system from KUKA SystemSoftware. An Access Control Error vulnerability exists in KUKA SystemSoftware V/KSS versions prior to 8.6.5 that stems from incorrect access control. An attacker can exploit this vulnerability to directly read or write...
CVE-2022-2242: Missing Authentication for Critical Function
The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled default...
CVE-2022-2675 Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down
Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...
Flaws in Enabot Ebo Air Home Security Robot Allowed Attackers to Spy on Users
By Deeba Ahmed If exploited, the flaw could have allowed an attacker to hijack the devices camera and microphone to spy… This is a post from HackRead.com Read the original post: Flaws in Enabot Ebo Air Home Security Robot Allowed Attackers to Spy on Users...
GHSA-M53P-F25Q-Q6FG XXE vulnerability in Jenkins Robot Framework Plugin
Robot Framework Plugin 2.0.0 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. This allows a user able to control the input files for the 'Publish Robot Framework' post-build step to have Jenkins parse a crafted file that uses external entities for extracti...
XXE vulnerability in Jenkins Robot Framework Plugin
Robot Framework Plugin 2.0.0 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. This allows a user able to control the input files for the 'Publish Robot Framework' post-build step to have Jenkins parse a crafted file that uses external entities for extracti...
Observable Discrepancy in BouncyCastle
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable...
GHSA-WRWF-PMMJ-W989 Observable Discrepancy in BouncyCastle
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable...
GHSA-XH22-FW58-56PP Robocode Arbitrary Code Execution
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method...
FANUC ROBOGUIDE access control error vulnerability
FANUC ROBOGUIDE is a robot simulation software from FANUC Japan.ROBOGUIDE v9.40083.00.05 and earlier versions have an access control error vulnerability that stems from not limiting or incorrectly restricting access to resources by unauthorized participants. An attacker could use this vulnerabili...
FANUC ROBOGUIDE XML External Entity Injection Vulnerability
FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. FANUC ROBOGUIDE v9.40083.00.05 and earlier versions exist XML external entity injection vulnerability, which originates from the lack of application restrictions on external entities. An attacker could exploit this vulnerability to...
FANUC ROBOGUIDE Resource Management Error Vulnerability
FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. A resource management error vulnerability exists in ROBOGUIDE v9.40083.00.05 and prior versions, which stems from an inability to properly control the allocation and maintenance of limited resources, and can be exploited by an...
FANUC ROBOGUIDE 代码问题漏洞
FANUC ROBOGUIDE is a robot simulation software from FANUC Japan. FANUC ROBOGUIDE v9.40083.00.05 and earlier versions exist XML external entity injection vulnerability, which originates from the lack of application restrictions on external entities. An attacker could exploit this vulnerability to...
Aethon TUG Home Base Server 安全漏洞
Aethon TUG Home Base Server is a robotics server from Aethon, Inc. It is used to control and communicate with autonomous mobile robots. Aethon TUG Home Base Server has a security vulnerability that originates from an unauthenticated attacker being able to connect to the TUG Home Base Server...
Aethon TUG Home Base Server
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Aethon owned by ST Engineering Equipment: TUG Home Base Server Vulnerabilities: Missing Authorization, Channel Accessible by Non-endpoint, Cross-site Scripting 2. RISK EVALUATION Successful exploitation...
Factors to Consider when Choosing a Robotic Arm
By Owais Sultan When deciding on an industrial robot for your facility, many options are to be considered. This article will… This is a post from HackRead.com Read the original post: Factors to Consider when Choosing a Robotic Arm...
WordPress Auto Robot – WP Autoblogging and RSS Feed News Aggregator plugin < 3.3.40 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Auto Robot – WP Autoblogging and RSS Feed News Aggregator plugin versions 3.3.40. Solution Update the WordPress Auto Robot – WP Autoblogging and RSS Feed News Aggregator plugin to the latest available version at least 3.3.40...
www2.robot-coupe.com Cross Site Scripting vulnerability OBB-2382835
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mitsubishi Electric MELFA (CVE-2021-20586)
Resource management errors vulnerability in a robot controller of MELFA FR Seriescontroller CR800-VD of RV-FR-D- all versions, controller CR800-HD of RH-FRH-D- all versions, controller CR800-HRD of RH-FRHR-D- all versions, controller CR800-VR with R16RTCPU of RV-FR-R- all versions, controller...