Skip to content
OpenAdvisories
Critical ICSA-21-208-01 2 CVEs

KUKA KR C4

Published Jul 27, 2021 · Updated Jul 27, 2021

Vendor: KUKA Product: KR C4 Product: KSS

Summary

Successful exploitation of these vulnerabilities could result in unauthorized access to sensitive information and access to shell.

Vulnerabilities 2

  • Critical 9.8
    CVE-2021-33016

    KUKA KR C4 - Use of Hard-Coded Credentials

    An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

    KUKA KR C4 KSS (KUKA.SystemSoftware)
  • High 8.8
    CVE-2021-33014

    KUKA KR C4 - Use of Hard-Coded Credentials

    An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

    KUKA KSS (KUKA.SystemSoftware) KR C4

Revision history

  1. #1

    ICSA-21-208-01 KUKA KR C4

References