Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-10286

RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ufactory
Products
Xarm 5 Lite Xarm 5 Lite Firmware Xarm 6 and 3 more
CVE-2020-10285

RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Ufactory
Products
Xarm 5 Lite Xarm 5 Lite Firmware