CVE-2022-2242

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Score

CVSS 3.1 9.8 Critical

Status

Modified - info@cert.vde.com

Published

2022-08-10

Last modified

2024-09-17

Weaknesses

CWE-306

Affected products

• Systemsoftware V/kss (Kuka)
• Systemsoftware Vkss (Kuka)

References

• https://www.kuka.com/advisories-CVE-2022-2242