Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-10284

Опубликовано: 15 июл. 2020
Источник: nvd
CVSS3: 9.1
CVSS3: 9.1
CVSS2: 6.4
EPSS Низкий

Описание

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ufactory:xarm_studio:1.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 64%
0.00459
Низкий

9.1 Critical

CVSS3

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-656
NVD-CWE-noinfo

Связанные уязвимости

github
больше 3 лет назад

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.

EPSS

Процентиль: 64%
0.00459
Низкий

9.1 Critical

CVSS3

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-656
NVD-CWE-noinfo