VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 6, 2020· Updated Jun 17, 2026

CVE-2020-10264

CVE-2020-10264

Description

CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 which allows setting registers, the speed slider fraction as well as digital and analog Outputs. Additionally unautheticated reading of robot data is also possible

Affected products

4
  • Universal Robots/Ur Software
    cpe:2.3:a:universal-robots:ur_software:*:*:*:*:*:*:*:*
    Range: >=3.0.14989,<=3.3.3.292
  • Universal Robots/RTDEllm-create
    Range: CB3 >= 3.3, e-series >= 5.0
  • Universal Robots A/S/Universal Robots Robot Controllers CB 3.1v5
    Range: CB3 SW Versions 3.3 up to 3.12.1
  • Universal Robots A/S/Universal Robots Robot Controllers e-Seriesv5
    Range: next of SW Versions 5.0 up to 5.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.