{"containers": {"cna": {"affected": [{"product": "URx", "vendor": "Universal Robots", "versions": [{"status": "affected", "version": "CB3 SW Versions 3.3 up to 3.12.1"}]}], "credits": [{"lang": "en", "value": "V\u00edctor Mayoral Vilches <victor@aliasrobotics.com>, Mike Karamousadakis, Lander Usategui San Juan"}], "datePublic": "2020-04-04T00:00:00", "descriptions": [{"lang": "en", "value": "UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR10), no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universal Robots. An attacker could exploit this flaw by crafting a custom component with the SDK, performing Person-In-The-Middle attacks (PITM) and shipping the maliciously-crafted component on demand."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-353", "description": "CWE-353 (Missing Support for Integrity Check)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-04-06T12:08:40", "orgId": "dc524f69-879d-41dc-ab8f-724e78658a1a", "shortName": "Alias"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/aliasrobotics/RVD/issues/1487"}], "source": {"defect": ["RVD#1487"], "discovery": "EXTERNAL"}, "title": "RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot", "x_generator": {"engine": "Robot Vulnerability Database (RVD)"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@aliasrobotics.com", "DATE_PUBLIC": "2020-04-04T16:53:42 +00:00", "ID": "CVE-2020-10266", "STATE": "PUBLIC", "TITLE": "RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "URx", "version": {"version_data": [{"version_value": "CB3 SW Versions 3.3 up to 3.12.1"}]}}]}, "vendor_name": "Universal Robots"}]}}, "credit": [{"lang": "eng", "value": "V\u00edctor Mayoral Vilches <victor@aliasrobotics.com>, Mike Karamousadakis, Lander Usategui San Juan"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR10), no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universal Robots. An attacker could exploit this flaw by crafting a custom component with the SDK, performing Person-In-The-Middle attacks (PITM) and shipping the maliciously-crafted component on demand."}]}, "generator": {"engine": "Robot Vulnerability Database (RVD)"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "high", "confidentialityImpact": "LOW", "integrityImpact": "REQUIRED", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-353 (Missing Support for Integrity Check)"}]}]}, "references": {"reference_data": [{"name": "https://github.com/aliasrobotics/RVD/issues/1487", "refsource": "CONFIRM", "url": "https://github.com/aliasrobotics/RVD/issues/1487"}]}, "source": {"defect": ["RVD#1487"], "discovery": "EXTERNAL"}}}}, "cveMetadata": {"assignerOrgId": "dc524f69-879d-41dc-ab8f-724e78658a1a", "assignerShortName": "Alias", "cveId": "CVE-2020-10266", "datePublished": "2020-04-04T00:00:00", "dateReserved": "2020-03-10T00:00:00", "dateUpdated": "2020-04-06T12:08:40", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:universal-robots:ur\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "91FE81D2-B3F6-4323-A765-CE44D324DBD9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:universal-robots:ur10:-:*:*:*:*:*:*:*", "matchCriteriaId": "07EAD156-50AB-4402-A42B-3E536AE99C32", "vulnerable": false}, {"criteria": "cpe:2.3:h:universal-robots:ur3:-:*:*:*:*:*:*:*", "matchCriteriaId": "FEBB3217-A74E-4EF2-BD4B-3964E57BC759", "vulnerable": false}, {"criteria": "cpe:2.3:h:universal-robots:ur5:-:*:*:*:*:*:*:*", "matchCriteriaId": "304BF507-9AE5-4A15-B037-32115093C73C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR10), no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universal Robots. An attacker could exploit this flaw by crafting a custom component with the SDK, performing Person-In-The-Middle attacks (PITM) and shipping the maliciously-crafted component on demand."}, {"lang": "es", "value": "UR+ (Universal Robots+), es una plataforma de vendedores de componentes de hardware y software para robots de Universal Robots. Cuando instalamos cualquiera de estos componentes en los robots (por ejemplo, en el UR10), no se realizan comprobaciones de integridad. Adem\u00e1s, el SDK para hacer tales componentes puede ser obtenido f\u00e1cilmente desde Universal Robots. Un atacante podr\u00eda explotar este fallo al dise\u00f1ar un componente personalizado con el SDK, llevando a cabo ataques de tipo Person-In-The-Middle (PITM) y enviando el componente dise\u00f1ado maliciosamente seg\u00fan se requiera."}], "id": "CVE-2020-10266", "lastModified": "2020-04-06T23:10:51.920", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "cve@aliasrobotics.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-04-06T12:15:12.957", "references": [{"source": "cve@aliasrobotics.com", "tags": ["Third Party Advisory"], "url": "https://github.com/aliasrobotics/RVD/issues/1487"}], "sourceIdentifier": "cve@aliasrobotics.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-345"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-353"}], "source": "cve@aliasrobotics.com", "type": "Secondary"}]}

{}