CVE-2020-10284

Katalog CVE

CVSS 9.1 · Critical EPSS 1,4%

Kerentanan Reliance on Security Through Obscurity pada ufactory xarm studio. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.

Rincian

Terbit di NVD

15 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-656: Reliance on Security Through Obscurity

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ufactory.cc/#/en/support/download/xarm advisory vendor