Read the docs
TI-2020-08271 Aliases CVE-2020-10264GHSA-hgj8-w26q-693m

RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputs

Priority LOW 39CWE-200Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure, Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200 and CWE-306.

Summary

CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot data is also possible

Why it matters now

EPSS 0.00584 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Universal Robots A/SUniversal Robots Robot Controllers CB 3.1CB3 SW Versions 3.3 up to 3.12.1—No fix listedCNA
Universal Robots A/SUniversal Robots Robot Controllers e-Seriesnext of SW Versions 5.0 up to 5.7 and later—No fix listedCNA
  • Universal Robots Robot Controllers CB 3.1 VendorUniversal Robots A/S Affected CB3 SW Versions 3.3 up to 3.12.1 Fixed in — No fix listed CNA
  • Universal Robots Robot Controllers e-Series VendorUniversal Robots A/S Affected next of SW Versions 5.0 up to 5.7 and later Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:*3.0.14989 – 3.3.3.292VulnerableUniversal Robots
cpe:2.3:h:universal-robots:ur10:-:*:*:*:*:*:*:*not specified by NVDRunning onUniversal Robots
cpe:2.3:h:universal-robots:ur3:-:*:*:*:*:*:*:*not specified by NVDRunning onUniversal Robots
cpe:2.3:h:universal-robots:ur5:-:*:*:*:*:*:*:*not specified by NVDRunning onUniversal Robots
cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:*5.0VulnerableUniversal Robots
cpe:2.3:h:universal-robots:ur10e:-:*:*:*:*:*:*:*not specified by NVDRunning onUniversal Robots
cpe:2.3:h:universal-robots:ur3e:-:*:*:*:*:*:*:*not specified by NVDRunning onUniversal Robots
cpe:2.3:h:universal-robots:ur5e:-:*:*:*:*:*:*:*not specified by NVDRunning onUniversal Robots
  • cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:* Versions 3.0.14989 – 3.3.3.292 Vulnerable ·Universal Robots
  • cpe:2.3:h:universal-robots:ur10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
  • cpe:2.3:h:universal-robots:ur3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
  • cpe:2.3:h:universal-robots:ur5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
  • cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Universal Robots
  • cpe:2.3:h:universal-robots:ur10e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
  • cpe:2.3:h:universal-robots:ur3e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
  • cpe:2.3:h:universal-robots:ur5e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-10264
  2. 2026-10-03 Alias added: GHSA-hgj8-w26q-693m

References

Advisory 1

  • TI-2020-08272 RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions CVSS 3.1CRITICAL 9.4
  • TI-2020-08274 RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences