CVE-2020-10288

IRC5 exposes an ftp server port 21. Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted...

CVE-2020-10288 RVD#3327: No authentication required for accesing ABB IRC5 FTP server

IRC5 exposes an ftp server port 21. Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted...

CVE-2020-10288

Summary: CVE-2020-10288 affects the ABB IRC5 FTP server, exposing the robot control system to an authentication bypass via the FTP login prompt. The issue occurs because the server accepts any non-empty credentials, effectively allowing remote, unauthenticated access to the FTP service. Public re...