Description
An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| KUKA | KR C4 | All – < v8.7 | v8.7 |
| KUKA | KSS (KUKA.SystemSoftware) | All | — |
Advisories 1
- ICSA-21-208-01 KUKA KR C4 CISA ICS & IT advisories · Jul 27, 2021