7 matches found
Code injection
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE Real-Time Data Exchange interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot...
CVE-2020-10264
CVE-2020-10264 affects CB3 SW (v3.3+) and e-series SW (v5.0+) where the RTDE interface on port 30004 can be accessed in ways described in the records: authenticated access allows setting registers, adjusting the speed slider, and controlling digital/analog outputs, and there is also unauthenticat...
PT-2020-12013
Name of the Vulnerable Software and Affected Versions CB3 SW versions 3.3 and upwards e-series SW versions 5.0 and upwards Description The issue allows authenticated access to the RTDE Real-Time Data Exchange interface on port 30004, enabling the setting of registers, the speed slider fraction, a...
CVE-2020-10264: Exposure of Sensitive Information to an Unauthorized Actor
CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE Real-Time Data Exchange interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot...
Design/Logic Flaw
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...
PT-2020-19485
Name of the Vulnerable Software and Affected Versions UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3 Description The issue allows for XSS via the cB3?ta= parameter, which is related to the profile title. Recommendations For versions 3.4.1.15, 3.4.2.4, and 3.4.3, consider restricting access to...