Skip to content
OpenAdvisories
Critical · 9.4 CVE-2020-10285 EUVD-2020-2740GHSA-jfc5-j6cj-cj2x

RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks

Published Jul 15, 2020 · Updated Sep 17, 2024 · Assigned by Alias

Description

The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.

Affected products

VendorProductAffectedFixed
uFactory xArm5 Lite, xArm 6 and xArm 7 v1.5.0 and before —

References