CVE-2020-10265

The CVE-2020-10265 entry covers UR Universal Robots Robot Controllers (CB2 1.4+, CB3 3.0+, e-series 5.0+) exposing a DashBoard server on port 29999 that allows control over core robot functions (start/stop programs, shutdown, reset safety, etc.) without authentication/authorization. This unauthen...

PT-2020-12014 · Universal Robots · Universal Robots Robot Controllers

Name of the Vulnerable Software and Affected Versions: Universal Robots Robot Controllers versions 1.4 and upwards Universal Robots Robot Controllers CB3 SW Version 3.0 and upwards Universal Robots Robot Controllers e-series SW Version 5.0 and upwards Description: The issue concerns the exposure ...

CVE-2020-10265: Missing Authentication for Critical Function

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safe...

CVE-2018-10635

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained...

CVE-2018-10633

Universal Robots Robot Controllers CB 3.1 with SW 3.4.5-100 are affected by CVE-2018-10633 due to hard-coded credentials (CWE-798), which could permit an attacker to reset the controller password. Affected product: CB 3.1, SW 3.4.5-100. Root cause: use of hard-coded credentials. Impact: remote at...

CVE-2018-10635

The CVE-2018-10635 vulnerability affects Universal Robots Robot Controllers CB 3.1 with software version 3.4.5-100, where TCP ports 30001/30002/30003 listen for URScript and can be remotely executed, potentially giving root access. The issue stems from executing arbitrary URScript received on tho...

Universal Robots Robot Controllers Hard-Coded Certificate Vulnerability

Universal Robots Robot Controllers is a collaborative robot controller product from Universal Robots, Denmark. A security vulnerability exists in Universal Robots Robot Controllers CB version 3.1 and SW version 3.4.5-100, which stems from the program's use of hard-coded credentials. An attacker...

Universal Robots Robot Controllers Remote Code Execution Vulnerability

Universal Robots Robot Controllers is a collaborative robot controller product from Universal Robots, Denmark. A security vulnerability exists in Universal Robots Robot Controllers CB version 3.1 and SW version 3.4.5-100, which originates from the use of TCP ports 3001 through 3003 for listening...

CVE-2018-10635: Missing Authentication for Critical Function

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained...

CVE-2018-10633: Use of Hard-coded Credentials

Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the controller...

PT-2018-10020

Name of the Vulnerable Software and Affected Versions Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 Description The issue allows a remote attacker with access to specific ports to execute arbitrary URScript code, potentially leading to root access. The affected ports are...

PT-2018-10019

Name of the Vulnerable Software and Affected Versions Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 Description The issue concerns the use of hard-coded credentials in the software, which could allow an attacker to reset passwords for the controller. Recommendations For...