CVE-2020-10285

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@aliasrobotics.com

Published

2020-07-15

Last modified

2024-09-17

Weaknesses

CWE-307, CWE-331

Affected products

• Xarm5 Lite (Ufactory)
• Xarm 5 Lite Firmware (Ufactory)
• Xarm 6 And Xarm 7 (Ufactory)

References

• https://github.com/aliasrobotics/RVD/issues/3322