Read the docs

FANUC

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

FANUC records in CISA KEV

No FANUC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Roboguide · all components

Priority LOW 30

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00172 Published 2022-04-20 Fixed in v9.40083.00.05 (Rev T) CWE-284
Priority LOW 29

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00874 Published 2022-04-20 Fixed in v9.40083.00.05 (Rev T) CWE-22
Priority LOW 28

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00692 Published 2022-04-20 Fixed in v9.40083.00.05 (Rev T) CWE-611
Priority LOW 28

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00691 Published 2022-04-20 Fixed in v9.40083.00.05 (Rev T) CWE-400
Priority LOW 26

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation.

CVSS 3.1MEDIUM 6.0 Local Low privileges User interaction EPSS 0.00165 Published 2022-04-20 Fixed in v9.40083.00.05 (Rev T) CWE-732
Open these records in search →