1312 matches found
CVE-2020-28421
CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot controller component that allows local attackers to elevate privileges...
CVE-2020-28421
CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot controller component that allows local attackers to elevate privileges...
Input validation
CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot controller component that allows local attackers to elevate privileges...
CVE-2020-28421
CA Unified Infrastructure Management (UIM) versions 20.1 and earlier are affected by CVE-2020-28421 due to a privilege-escalation vulnerability in the robot (controller) component. The issue allows a local attacker to gain elevated privileges, with impact described as privilege escalation in the ...
CVE-2020-28421: Undefined Security Weakness
CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot controller component that allows local attackers to elevate privileges...
PT-2020-17008
Name of the Vulnerable Software and Affected Versions CA Unified Infrastructure Management versions 20.1 and earlier Description The issue allows local attackers to elevate privileges due to a vulnerability in the robot controller component. Recommendations For CA Unified Infrastructure Managemen...
Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack
Researchers have uncovered a new attack that lets bad actors snoop in on homeowners’ private conversations – through their robot vacuums. The vacuums, which utilize smart sensors in order to autonomously operate, have gained traction over the past few years. The attack, called “LidarPhone” by...
Friday Squid Blogging: Underwater Robot Uses Squid-Like Propulsion
This is neat: By generating powerful streams of water, UCSDs squid-like robot can swim untethered. The "squidbot" carries its own power source, and has the room to hold more, including a sensor or camera for underwater exploration. As usual, you can also use this squid post to talk about the...
robot-coupe.com Cross Site Scripting vulnerability OBB-1346575
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Debian DLA-2357-1 : ros-actionlib security update
Use of unsafe yaml load was fixed in ros-actionlib, the Robot OS actionlib library. For Debian 9 stretch, this problem has been fixed in version 1.11.7-1+deb9u1. We recommend that you upgrade your ros-actionlib packages. For the detailed security status of ros-actionlib please refer to its securi...
[SECURITY] [DLA 2357-1] ros-actionlib security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2357-1 [email protected] https://www.debian.org/lts/security/ August 30, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...
CVE-2020-10290: Execution with Unnecessary Privileges
Universal Robots controller execute URCaps zip files containing Java-powered applications without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our PoC we demonstrate how a malicious actor...
PT-2020-12039
Name of the Vulnerable Software and Affected Versions Universal Robots controller affected versions not specified Description The issue allows a malicious actor to compromise the system by creating a custom URCap, which is a zip file containing Java-powered applications. These URCaps can be...
CVE-2020-14313
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...
CVE-2020-14313
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...
Information disclosure
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...
PT-2020-13969
Name of the Vulnerable Software and Affected Versions Red Hat Quay versions prior to 3.3.1 Description An information disclosure issue was found in Red Hat Quay. This flaw allows an attacker who can create a build trigger in a repository to disclose the names of robot accounts and the existence o...
CVE-2020-14313: Undefined Security Weakness
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot accounts and the existence of private repositories within any namespace...
Robot Character Analysis Reveals Trust Issues
ARCHIVED STORY Robot Character Analysis Reveals Trust Issues By Douglas McKee · August 05, 2020 Retired Marine fighter pilot and Top Gun instructor Dave Berke said “Every single thing you do in your life, every decision you make, is an OODA Loop.” OODA Loop? Observe–Orient–Decide–Act, the “OODA...
Call an Exorcist! My Robot! My Robot's Possessed!
ARCHIVED STORY Call an Exorcist! My Robot’s Possessed! By Mark Bereza · AUG 05, 2020 · 69 MIN READ Overview As part of our continued goal of helping developers provide safer products for businesses and consumers, we here at McAfee Advanced Threat Research ATR recently investigated temi, a...