PatchTheCVEufactory vulnerabilities
Recent CVEs affecting ufactory products. 3 tracked.
ufactory has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-07-15. Highest priority: CVE-2020-10285 (score 57/100).
- CVE-2020-10286 HIGH 8.8 UPGRADE MITIGATE the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in
- CVE-2020-10285 CRITICAL 9.8 UPGRADE The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute
- CVE-2020-10284 CRITICAL 9.1 DOWNGRADE No authentication is required to control the robot inside the network, moreso the latest available user manual
FAQ
How do I fix ufactory vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ufactory being exploited right now?
None of the tracked ufactory CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ufactory CVE should I patch first?
CVE-2020-10285 currently ranks highest (57/100): The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute.