CVE-2020-10265: Missing Authentication for Critical Function

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safe...

PT-2018-10019

Name of the Vulnerable Software and Affected Versions Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 Description The issue concerns the use of hard-coded credentials in the software, which could allow an attacker to reset passwords for the controller. Recommendations For...

PT-2018-10020

Name of the Vulnerable Software and Affected Versions Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 Description The issue allows a remote attacker with access to specific ports to execute arbitrary URScript code, potentially leading to root access. The affected ports are...

CVE-2018-10633: Use of Hard-coded Credentials

Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the controller...

CVE-2018-10635: Missing Authentication for Critical Function

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained...