CVE-2018-10635

Summary

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained.

Affected Software

VendorProductVersion RangeStatus
Universal RobotsUniversal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100affected

Weaknesses

  • CWE-306: MISSING AUTHENTICATION FOR CRITICAL FUNCTION CWE-306

ADP Enrichment

CVE Program Container

Additional References

References