CVE-2020-10286

Katalog CVE

CVSS 8.8 · High EPSS 0,74%

Kerentanan Reliance on Security Through Obscurity pada ufactory xarm 5 lite firmware, ufactory xarm 6 firmware +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.

Rincian

Terbit di NVD

15 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-656: Reliance on Security Through Obscurity
CWE-269: Improper Privilege Management

EPSS (30 hari)

0,74% peluang dieksploitasi; lebih tinggi dari 53,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/aliasrobotics/RVD/issues/3323 advisory pihak ketiga