Description
An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| KUKA | KR C4 | All – < v8.7 | v8.7 |
| KUKA | KSS (KUKA.SystemSoftware) | All | — |
Advisories 1
- ICSA-21-208-01 KUKA KR C4 CISA ICS & IT advisories · Jul 27, 2021