3 matches found
Code injection
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE Real-Time Data Exchange interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot...
CVE-2020-10264
CVE-2020-10264 affects CB3 SW (v3.3+) and e-series SW (v5.0+) where the RTDE interface on port 30004 can be accessed in ways described in the records: authenticated access allows setting registers, adjusting the speed slider, and controlling digital/analog outputs, and there is also unauthenticat...
Design/Logic Flaw
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...