PT-2022-15421 · Kuka · Kuka Systemsoftware V/Kss
CVE-2022-2242
·
Published
2022-08-10
·
Updated
2022-08-12
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
KUKA SystemSoftware V/KSS versions prior to 8.6.5
Description
The issue is related to improper access control, allowing an unauthorized attacker to directly read and write robot configurations when access control is not available or not enabled, which is the default setting.
Recommendations
For versions prior to 8.6.5, update to version 8.6.5 or later to resolve the issue.
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kuka Systemsoftware V/Kss