Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Universal Robots Component: Ur Software Clear all filters
TI-2020-08274 CVE-2020-10267 · GHSA-m3fh-cx4w-xf4m

RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions

Priority LOW 35

Universal Robots control box CB 3.1 across firmware versions (tested on 1.12.1, 1.12, 1.11 and 1.10) does not encrypt or protect in any way the intellectual property artifacts installed from the UR+ platform of hardware…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00953 Published 2020-04-06 No fix listed CWE-311
TI-2020-08272 CVE-2020-10265 · GHSA-295c-7mqg-g3v8

RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions

Priority MEDIUM 43

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control ov…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01466 Published 2020-04-06 No fix listed CWE-306
TI-2020-08271 CVE-2020-10264 · GHSA-hgj8-w26q-693m

RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputs

Priority LOW 39

CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 which allows setting registers, the speed slider fraction as we…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00584 Published 2020-04-06 No fix listed CWE-200