Read the docs

Universal Robots

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Universal Robots records in CISA KEV

No Universal Robots vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ur Software 3 records MEDIUM Cb3.1 Firmware 2 records MEDIUM Ur+ 1 record LOW

Records

3 records in Ur Software · all components

TI-2020-08272 CVE-2020-10265 · GHSA-295c-7mqg-g3v8

RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions

Priority MEDIUM 43

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control ov…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01466 Published 2020-04-06 No fix listed CWE-306
TI-2020-08271 CVE-2020-10264 · GHSA-hgj8-w26q-693m

RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputs

Priority LOW 39

CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 which allows setting registers, the speed slider fraction as we…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00584 Published 2020-04-06 No fix listed CWE-200
TI-2020-08274 CVE-2020-10267 · GHSA-m3fh-cx4w-xf4m

RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions

Priority LOW 35

Universal Robots control box CB 3.1 across firmware versions (tested on 1.12.1, 1.12, 1.11 and 1.10) does not encrypt or protect in any way the intellectual property artifacts installed from the UR+ platform of hardware…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00953 Published 2020-04-06 No fix listed CWE-311
Open these records in search →