CVEs published by Alias Robotics S.L.

CVEs published by Alias Robotics S.L. (CVE Numbering Authority). 29 tracked.

• CVE-2020-10292 HIGH 8.2 DOWNGRADE Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order
• CVE-2020-10291 HIGH 7.5 DOWNGRADE Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order
• CVE-2020-10290 MEDIUM 6.8 MITIGATE Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permis
• CVE-2020-10289 HIGH 8.8 MITIGATE Use of unsafe yaml load
• CVE-2020-10288 CRITICAL 9.8 DOWNGRADE IRC5 exposes an ftp server (port 21)
• CVE-2020-10287 CRITICAL 9.8 MITIGATE MITIGATE The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly avail
• CVE-2020-10286 HIGH 8.8 UPGRADE MITIGATE the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in
• CVE-2020-10285 CRITICAL 9.8 UPGRADE The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute
• CVE-2020-10284 CRITICAL 9.1 DOWNGRADE No authentication is required to control the robot inside the network, moreso the latest available user manual
• CVE-2020-10283 CRITICAL 9.8 DOWNGRADE The Micro Air Vehicle Link (MAVLink) protocol presents authentication mechanisms on its version 2.0 however ac
• CVE-2020-10282 CRITICAL 9.8 DOWNGRADE The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor aut
• CVE-2020-10281 HIGH 7.5 MITIGATE This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to ga
• CVE-2020-10280 HIGH 7.5 UPGRADE MITIGATE The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP he
• CVE-2020-10279 CRITICAL 9.8 UPGRADE UPGRADE MiR robot controllers (central computation unit) makes use of Ubuntu 16.04.2 an operating system, Thought for
• CVE-2020-10278 MEDIUM 4.6 UPGRADE UPGRADE The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify se
• CVE-2020-10277 MEDIUM 6.4 UPGRADE MITIGATE There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extrac
• CVE-2020-10276 CRITICAL 9.8 UPGRADE MITIGATE The password for the safety PLC is the default and thus easy to find (in manuals, etc.)
• CVE-2020-10275 CRITICAL 9.8 UPGRADE MITIGATE The access tokens for the REST API are directly derived from the publicly available default credentials for th
• CVE-2020-10274 HIGH 7.1 UPGRADE MITIGATE The access tokens for the REST API are directly derived (sha256 and base64 encoding) from the publicly availab
• CVE-2020-10273 HIGH 7.5 UPGRADE UPGRADE MiR controllers across firmware versions 2.8.1.1 and before do not encrypt or protect in any way the intellect
• CVE-2020-10272 CRITICAL 9.8 UPGRADE UPGRADE MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computa
• CVE-2020-10271 CRITICAL 9.8 UPGRADE UPGRADE MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computa
• CVE-2020-10270 CRITICAL 9.8 UPGRADE UPGRADE Out of the wired and wireless interfaces within MiR100, MiR200 and other vehicles from the MiR fleet, it's pos
• CVE-2020-10269 CRITICAL 9.8 UPGRADE UPGRADE One of the wireless interfaces within MiR100, MiR200 and possibly (according to the vendor) other MiR fleet ve
• CVE-2020-10268 MEDIUM 6.1 MITIGATE Critical services for operation can be terminated from windows task manager, bringing the manipulator to a hal
• CVE-2020-10267 HIGH 7.5 UPGRADE Universal Robots control box CB 3.1 across firmware versions (tested on 1.12.1, 1.12, 1.11 and 1.10) does not
• CVE-2020-10266 HIGH 8.1 MITIGATE UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots
• CVE-2020-10265 CRITICAL 9.4 UPGRADE Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-serie
• CVE-2020-10264 HIGH 8.8 UPGRADE CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Re

← Back to latest CVEs