Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-2242 EUVD-2022-34520GHSA-x94p-26xf-7j8g

KUKA V/KSS WoV SH access control vulnerability

Published Aug 10, 2022 · Updated Sep 17, 2024 · Assigned by CERTVDE

Description

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Affected products

VendorProductAffectedFixed
KUKA SystemSoftware V/KSS 8.2 – < 8.6.5 8.6.5

References