Backdoors in Learning-Based Industrial Robotic Arm Manipulation: An Empirical Security Study

Learning-based models e.g., visuomotor and Vision-Language-Action VLA are increasingly explored for industrial robotic manipulation, where model predictions are directly translated into physical actions. This tight coupling between model behavior and physical execution makes hidden security...

CVE-2020-10285

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access...

CVE-2020-10285

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access...

Authentication flaw

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access...

CVE-2020-10285 RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access...

CVE-2020-10285

The CVE-2020-10285 entry concerns the authentication mechanism of the xArm controller, which uses very low entropy and lacks any lockout or mitigation for automated brute-force attempts. Connected sources corroborate a network-exposed credential weakness that enables brute-forcing access, with hi...

CVE-2020-10284

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarmstudio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the...

PT-2020-12033

Name of the Vulnerable Software and Affected Versions xarm studio version 1.3.0 Description The issue allows for control of the robot inside the network without requiring authentication. According to the user manual, there should be an option to add a password to the robot, but this option is...

PT-2020-12034

Name of the Vulnerable Software and Affected Versions xArm controller affected versions not specified Description The authentication implementation has very low entropy, making it susceptible to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain...

CVE-2020-10285: Improper Restriction of Excessive Authentication Attempts

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access...