EUVD-2020-2731

Malware in sbrugna...

Hardcoded credentials

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...

CVE-2020-10276 RVD#2558: Default credentials on SICK PLC allows disabling safety features

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...

CVE-2020-10276

CVE-2020-10276 involves improper access control due to default passwords on the SICK safety PLC in MiR robots. The MiR 2.x line ships with insecure default credentials, which could allow an attacker on the internal network to manipulate the safety PLC and disable the emergency stop, potentially e...