CVE-2020-10265: Universal Robots Robot Controllers CB 2, CB3

Описание

Оригинално описание

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safety and more. The DashBoard server is not protected by any kind of authentication or authorization.

Засегнати продукти

• Universal Robots Universal Robots Robot Controllers CB 2, CB3, e-series: unspecified

Вид слабост

• CWE-306 Липсваща автентикация за критична функционалност

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2020-10265
• https://nvd.nist.gov/vuln/detail/CVE-2020-10265
• https://www.universal-robots.com/how-tos-and-faqs/how-to/ur-how-tos/real-time-data-exchange-rtde-guide/