PatchTheCVEkuka vulnerabilities
Recent CVEs affecting kuka products. 4 tracked.
kuka has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-08-10. Highest priority: CVE-2022-2242 (score 56/100).
- CVE-2022-2242 CRITICAL 9.8 UPGRADE The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorize
- CVE-2021-33016 CRITICAL 9.8 UPGRADE MITIGATE An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUK
- CVE-2021-33014 HIGH 8.8 UPGRADE MITIGATE An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software
- CVE-2020-10635 MEDIUM 4.3 DOWNGRADE Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA
FAQ
How do I fix kuka vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kuka being exploited right now?
None of the tracked kuka CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kuka CVE should I patch first?
CVE-2022-2242 currently ranks highest (56/100): The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorize.