Alias

Latest CVEs · RSS

• CVE-2020-10291 2020-11-06 · CVSS 7.5
  Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes.
• CVE-2020-10292 2020-11-06 · CVSS 8.2
  Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes.
• CVE-2020-10290 2020-08-21 · CVSS 6.8
  Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents man
• CVE-2020-10283 2020-08-20 · CVSS 8.1
  The Micro Air Vehicle Link (MAVLink) protocol presents authentication mechanisms on its version 2.0 however according to its documentation, in order to maintain
• CVE-2020-10289 2020-08-20 · CVSS 8.0
  Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an acti
• CVE-2020-10287 2020-07-15 · CVSS 9.1
  The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented
• CVE-2020-10288 2020-07-15 · CVSS 9.8
  IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever
• CVE-2020-10286 2020-07-15 · CVSS 9.4
  the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gain
• CVE-2020-10285 2020-07-15 · CVSS 9.4
  The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to m
• CVE-2020-10284 2020-07-15 · CVSS 9.1
  No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a passw
• CVE-2020-10282 2020-07-03 · CVSS 9.8
  The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization) whichs leads to a variety of attacks i
• CVE-2020-10281 2020-07-03 · CVSS 7.5
  This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to gain access to sensitive information provided it has
• CVE-2020-10279 2020-06-24 · CVSS 10.0
  MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for desktop uses, this operating system presents insec
• CVE-2020-10280 2020-06-24 · CVSS 8.2
  The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dash
• CVE-2020-10269 2020-06-24 · CVSS 9.8
  One of the wireless interfaces within MiR100, MiR200 and possibly (according to the vendor) other MiR fleet vehicles comes pre-configured in WiFi Master (Access
• CVE-2020-10275 2020-06-24 · CVSS 9.8
  The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD,
• CVE-2020-10273 2020-06-24 · CVSS 7.5
  MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellectual property artifacts installed in the robots. Th
• CVE-2020-10278 2020-06-24 · CVSS 6.1
  The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged b
• CVE-2020-10277 2020-06-24 · CVSS 6.4
  There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) o
• CVE-2020-10270 2020-06-24 · CVSS 9.8
  Out of the wired and wireless interfaces within MiR100, MiR200 and other vehicles from the MiR fleet, it's possible to access the Control Dashboard on a hardcod
• CVE-2020-10276 2020-06-24 · CVSS 9.8
  The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, eff
• CVE-2020-10271 2020-06-24 · CVSS 10.0
  MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational graph to all network interfaces, wireless a
• CVE-2020-10274 2020-06-24 · CVSS 7.1
  The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly available default credentials from the Control Dashboard
• CVE-2020-10272 2020-06-24 · CVSS 10.0
  MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational graph without any sort of authentication. T
• CVE-2020-10268 2020-06-16
  Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs