Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Franka Robotics Clear all filters
TI-2021-22300 CVE-2021-47664 · GHSA-547h-g7h3-f28q

Enumeration of valid user names

Priority LOW 30

Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00414 Published 2025-04-24 No fix listed CWE-203
TI-2021-22299 CVE-2021-47663 · GHSA-wwjc-h7f8-cqv5

Improper session handling

Priority LOW 38

Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00465 Published 2025-04-24 No fix listed CWE-613
TI-2021-22298 CVE-2021-47662 · GHSA-c466-pgm8-c4p5

Unauthenticated remote shutdown of the cobot

Priority LOW 39

Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2025-04-24 No fix listed CWE-862