CVE-2020-10268

Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that interfaces with the manipulator furthering the delay and increasing operational costs.

CVSS v3 6.1 MEDIUM
CVSS v2.0 3.6 LOW

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.2

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

3.6^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:P

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://github.com/aliasrobotics/RVD/issues/2550	Third Party Advisory
https://github.com/aliasrobotics/RVD/issues/2550	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:kuka:kr_c4_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:kuka:kr_c4:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:55

Type	Values Removed	Values Added
References	~~() https://github.com/aliasrobotics/RVD/issues/2550 - Third Party Advisory~~	() https://github.com/aliasrobotics/RVD/issues/2550 - Third Party Advisory

Information

Published : 2020-06-16 18:15

Updated : 2024-11-21 04:55

NVD link : CVE-2020-10268

Mitre link : CVE-2020-10268

CVE.ORG link : CVE-2020-10268

JSON object : View

Products Affected

kuka

kr_c4_firmware
kr_c4

CWE

CWE-749

Exposed Dangerous Method or Function

NVD-CWE-noinfo

{"id": "CVE-2020-10268", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 0.9}]}, "published": "2020-06-16T18:15:17.027", "references": [{"url": "https://github.com/aliasrobotics/RVD/issues/2550", "tags": ["Third Party Advisory"], "source": "cve@aliasrobotics.com"}, {"url": "https://github.com/aliasrobotics/RVD/issues/2550", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "cve@aliasrobotics.com", "description": [{"lang": "en", "value": "CWE-749"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that interfaces with the manipulator furthering the delay and increasing operational costs."}, {"lang": "es", "value": "Los servicios cr\u00edticos para la operaci\u00f3n se pueden finalizar desde el administrador de tareas de Windows, provocando que el manipulador se detenga. Despu\u00e9s de esto, una recalibraci\u00f3n de los frenos se debe llevar a cabo. Tome en cuenta que esto solo puede lograrlo un t\u00e9cnico de Kuka o un hardware de calibraci\u00f3n emitido por Kuka que interact\u00fae con el manipulador, promoviendo el retraso e incrementando los costos operativos"}], "lastModified": "2024-11-21T04:55:06.133", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:kuka:kr_c4_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "377A0187-FEE3-48BB-A225-30B13FBC3EF9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:kuka:kr_c4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A25F107-7654-4B4C-BA1E-4B3098AC4568"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@aliasrobotics.com"}