Vulnerability Details : CVE-2020-10276
The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the laser scanner are not affected (thus it is hard to detect before something happens) though the laser scanner configuration can also be affected altering further the safety of the device.
Products affected by CVE-2020-10276
- cpe:2.3:o:uvd-robots:uvd_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mobile-industrial-robots:mir100_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:mobile-industrial-robots:mir200_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mobile-industrial-robots:mir250_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mobile-industrial-robots:mir500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mobile-industrial-robots:mir1000_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:easyrobotics:er200_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:easyrobotics:er-lite_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:easyrobotics:er-flex_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:easyrobotics:er-one_firmware:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-10276
0.36%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 55 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-10276
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
Alias Robotics S.L. | |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2020-10276
-
The product contains hard-coded credentials, such as a password or cryptographic key.Assigned by:
- cve@aliasrobotics.com (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2020-10276
-
https://github.com/aliasrobotics/RVD/issues/2558
RVD#2558: Default credentials on SICK PLC allows disabling safety features · Issue #2558 · aliasrobotics/RVD · GitHubThird Party Advisory
Jump to