CVE-2020-10266

Katalog CVE

CVSS 8.1 · High EPSS 0,50%

Kerentanan Missing Support for Integrity Check pada universal-robots ur+. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR10), no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universal Robots. An attacker could exploit this flaw by crafting a custom component with the SDK, performing Person-In-The-Middle attacks (PITM) and shipping the maliciously-crafted component on demand.

Rincian

Terbit di NVD

6 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-353: Missing Support for Integrity Check
CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,50% peluang dieksploitasi; lebih tinggi dari 41,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/aliasrobotics/RVD/issues/1487 advisory pihak ketiga