exploitDog

CVE-2022-2242

Опубликовано: 10 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Ссылки

https://www.kuka.com/advisories-CVE-2022-2242
Mitigation
Vendor Advisory
https://www.kuka.com/advisories-CVE-2022-2242
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kuka:systemsoftware_v\/kss:*:*:*:*:*:*:*:*

Версия от 8.2 (включая) до 8.6.5 (исключая)

EPSS

Процентиль: 57%

0.00347

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306

Связанные уязвимости

GHSA-x94p-26xf-7j8g

CVSS3: 9.8

github

больше 3 лет назад

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

EPSS

Процентиль: 57%

0.00347

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306