RVD#1495: Universal Robots URCaps execute with unbounded privileges
CVE-2020-10290

6.8MEDIUM

Key Information:

Vendor

Universal Robots

Status
Urx
Vendor
CVE Published:
21 August 2020

What is CVE-2020-10290?

Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our PoC we demonstrate how a malicious actor could 'cook' a custom URCap that when deployed by the user (intendedly or unintendedly) compromises the system

Affected Version(s)

URx = unspecified

References

https://github.com/aliasrobotics/RVD/issues/1495
x_refsource_CONFIRM

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Victor Mayoral Vilches and Unai Ayucar Carbajo (Alias Robotics)
.