Vulnerability · Published Apr 20, 2022 · Assigned by icscert

CVE-2021-43988ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

Medium 6.1

In plain English

A medium-severity path traversal in ROBOGUIDE from FANUC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.9%top 40.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights.

Affected products (as reported)

Vendor	Product	Versions
FANUC	ROBOGUIDE	All – before v9.40083.00.05 (Rev T)

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03 x_refsource_MISC