CVE-2020-10284

RVD#3321: No Authentication required to exert manual control of the robot

State: Published
Severity: 9.1 Critical
Published: Jul 15, 2020
Updated: Sep 16, 2024
Reserved: Mar 10, 2020

Description

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.

Scores

CVSS	Score	Vector	Source
3.0	9.1 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H	Alias

Weaknesses

CWE-656

Affected Products

Product	Versions
xArm5 Lite, xArm 6 and xArm 7uFactory	v1.5.0 and beforeAffected

References

https://www.ufactory.cc/#/en/support/download/xarm

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.