Search vulnerabilities

Results 1

Export CSV
CVE-2020-10290

RVD#1495: Universal Robots URCaps execute with unbounded privileges

Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our PoC we demonstrate how a malicious actor could 'cook' a custom URCap that when deployed by the user (intendedly or unintendedly) compromises the system

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Urx