CVE-2020-10265

CRITICAL Year: 2020
CVSS v3 Score
9.4
Critical
CVSS v2 Score
9.0
Critical
Weakness Type
CWE-306
View all →

Vulnerability Description

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safety and more. The DashBoard server is not protected by any kind of authentication or authorization.

Related Vulnerabilities

CVE-2019-10919

CRITICAL
CVSS:9.4(Critical)

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files ...

CWE-3062019

CVE-2019-17354

CRITICAL
CVSS:9.4(Critical)

wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leve...

CWE-3062019

CVE-2020-25747

CRITICAL
CVSS:9.4(Critical)

The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, t...

CWE-3062020

CVE-2022-26833

CRITICAL
CVSS:9.4(Critical)

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthentica...

CWE-3062022

CVE-2024-10205

CRITICAL
CVSS:9.4(Critical)

Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component), Hitachi Infrastructure Analytics Advisor on Linux, 64 bit (Hita...

CWE-3062024

CVE-2024-9137

HIGH
CVSS:9.4(Critical)

The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to...

CWE-3062024