Skip to content
OpenAdvisories
Critical · 9.1 CVE-2020-10284 EUVD-2020-2739GHSA-2r34-57wf-fc67

RVD#3321: No Authentication required to exert manual control of the robot

Published Jul 15, 2020 · Updated Sep 16, 2024 · Assigned by Alias

Description

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.

Affected products

VendorProductAffectedFixed
uFactory xArm5 Lite, xArm 6 and xArm 7 v1.5.0 and before —

References