Vulnerabilities

TI-2020-08293 CVE-2020-10286 · GHSA-vm7p-7vqv-5rq2

Improper privilege management in uFactory xArm 5 Lite, xArm 6 and xArm 7

LOW 39

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or is…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00744 Published 2020-07-15 No fix listed CWE-656

TI-2020-08292 CVE-2020-10285 · GHSA-jfc5-j6cj-cj2x

RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

MEDIUM 45

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0132 Published 2020-07-15 No fix listed CWE-307

Vulnerabilities

Filters

Improper privilege management in uFactory xArm 5 Lite, xArm 6 and xArm 7

RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks