PT-2020-12039

Name of the Vulnerable Software and Affected Versions Universal Robots controller affected versions not specified Description The issue allows a malicious actor to compromise the system by creating a custom URCap, which is a zip file containing Java-powered applications. These URCaps can be...

CVE-2020-10290: Execution with Unnecessary Privileges

Universal Robots controller execute URCaps zip files containing Java-powered applications without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our PoC we demonstrate how a malicious actor...