RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions
Priority MEDIUM 43CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.
Summary
Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safety and more. The DashBoard server is not protected by any kind of authentication or authorization.
Why it matters now
EPSS 0.01466 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Universal Robots | Universal Robots Robot Controllers CB 2, CB3, e-series | all versions | — | No fix listed | CNA |
- Universal Robots Robot Controllers CB 2, CB3, e-series VendorUniversal Robots Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:* | 3.0.14989 – 3.3.3.292 | Vulnerable | Universal Robots |
| cpe:2.3:h:universal-robots:ur10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Universal Robots |
| cpe:2.3:h:universal-robots:ur3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Universal Robots |
| cpe:2.3:h:universal-robots:ur5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Universal Robots |
| cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:* | 1.4; 5.0 | Vulnerable | Universal Robots |
| cpe:2.3:h:universal-robots:ur10e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Universal Robots |
| cpe:2.3:h:universal-robots:ur3e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Universal Robots |
| cpe:2.3:h:universal-robots:ur5e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Universal Robots |
- cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:* Versions 3.0.14989 – 3.3.3.292 Vulnerable ·Universal Robots
- cpe:2.3:h:universal-robots:ur10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
- cpe:2.3:h:universal-robots:ur3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
- cpe:2.3:h:universal-robots:ur5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
- cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:* Versions 1.4; 5.0 Vulnerable ·Universal Robots
- cpe:2.3:h:universal-robots:ur10e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
- cpe:2.3:h:universal-robots:ur3e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
- cpe:2.3:h:universal-robots:ur5e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Universal Robots
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-10265
- 2026-10-03 Alias added: GHSA-295c-7mqg-g3v8
References
More Universal Robots Ur Software vulnerabilities
- TI-2020-08271 RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputs CVSS 3.1HIGH 8.8
- TI-2020-08274 RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions CVSS 3.1HIGH 7.5
Sources
- CVE-2020-10265 · CVE Program
- CVE-2020-10265 · NVD
- FIRST EPSS
- GHSA-295c-7mqg-g3v8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences