uFactory

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

uFactory records in CISA KEV

No uFactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xarm 5 Lite Firmware 2 records MEDIUM Xarm 6 Firmware 1 record LOW Xarm 7 Firmware 1 record LOW Xarm Studio 1 record MEDIUM

Records

2 records in Xarm 5 Lite Firmware · all components

TI-2020-08292 CVE-2020-10285 · GHSA-jfc5-j6cj-cj2x

RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

MEDIUM 45

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0132 Published 2020-07-15 No fix listed CWE-307

TI-2020-08293 CVE-2020-10286 · GHSA-vm7p-7vqv-5rq2

Improper privilege management in uFactory xArm 5 Lite, xArm 6 and xArm 7

LOW 39

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or is…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00744 Published 2020-07-15 No fix listed CWE-656

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0