CVE-2020-10266

Name of the Vulnerable Software and Affected Versions UR+ (Universal Robots+) (affected versions not specified)

Description The issue concerns the lack of integrity checks when installing components in Universal Robots robots through the UR+ platform. An attacker can exploit this by crafting a custom component using the easily obtainable SDK, potentially leading to Person-In-The-Middle (PITM) attacks. The attacker could then ship the malicious component, posing a risk to the robots' security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.