CVE-2018-10635

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-07-11

Last modified

2024-09-17

Weaknesses

CWE-306

Affected products

• Cb3.1 Firmware (Universal-robots)
• Sw Version 3.4.5-100 (Universal Robots)
• Universal Robots Robot Controllers Version Cb 3.1 (Universal Robots)

References

• http://www.securityfocus.com/bid/104710
• https://ics-cert.us-cert.gov/advisories/ICSA-18-191-01