Unrated severityNVD Advisory· Published Apr 6, 2020· Updated Sep 17, 2024
RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions
CVE-2020-10265
Description
Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safety and more. The DashBoard server is not protected by any kind of authentication or authorization.
Affected products
2- Range: >=1.4 (CB2), >=3.0 (CB3), >=5.0 (e-series)
- Range: unspecified
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.universal-robots.com/how-tos-and-faqs/how-to/ur-how-tos/real-time-data-exchange-rtde-guide/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.