An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01026·Published 2022-05-26·Fixed in v8.7CWE-798
An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.00917·Published 2022-05-26·Fixed in v8.7CWE-798