Vulnerability in Universal Robots Robot Controllers Exposes Hard-Coded Credentials
CVE-2018-10633

9.8CRITICAL

Key Information:

Vendor

Universal Robots

Status
Universal Robots Robot Controller Version Cb 3.1, Sw Version 3.4.5-100
Vendor
CVE Published:
11 July 2018

What is CVE-2018-10633?

The Universal Robots Robot Controllers, specifically Version CB 3.1 with SW Version 3.4.5-100, have a vulnerability that includes hard-coded credentials. This security flaw may allow unauthorized access, giving attackers the ability to reset passwords for the controller, thus potentially compromising the integrity and operation of connected robotic systems.

Affected Version(s)

Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100 Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100

References

http://www.securityfocus.com/bid/104710
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-191-01
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.