Vulnerabilities

TI-2020-08293 CVE-2020-10286 · GHSA-vm7p-7vqv-5rq2

Improper privilege management in uFactory xArm 5 Lite, xArm 6 and xArm 7

LOW 39

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or is…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00744 Published 2020-07-15 No fix listed CWE-656

TI-2020-08292 CVE-2020-10285 · GHSA-jfc5-j6cj-cj2x

RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

MEDIUM 45

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0132 Published 2020-07-15 No fix listed CWE-307

TI-2020-08291 CVE-2020-10284 · GHSA-2r34-57wf-fc67

RVD#3321: No Authentication required to exert manual control of the robot

MEDIUM 42

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is m…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01393 Published 2020-07-15 No fix listed CWE-656

Vulnerabilities

Filters

Improper privilege management in uFactory xArm 5 Lite, xArm 6 and xArm 7

RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

RVD#3321: No Authentication required to exert manual control of the robot