Vulnerability · Published Jun 16, 2020 · Assigned by Alias
CVE-2020-10268RVD#2550: Terminate Critical Services in KUKA controller KR C4
Medium 6.1
In plain English
A medium-severity security flaw in KR3R540, KRC4, KSS8.5.7HF1, Win7_Embedded from KUKA Roboter GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS NVD)6.1Medium
Exploit odds (30 days)0.3%top 74.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that interfaces with the manipulator furthering the delay and increasing operational costs.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| KUKA Roboter GmbH | KR3R540, KRC4, KSS8.5.7HF1, Win7_Embedded | unspecified |
Weakness: CWE-749
References
- https://github.com/aliasrobotics/RVD/issues/2550 x_refsource_CONFIRM