CVE-2020-10286 — RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information,…

CVE-2020-10286

RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS PUBLISHED

Description (CNA)

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.

Affected (CNA)

Vendor / product	Versions
uFactory / xArm 5 Lite, xArm 6 and xArm 7	affected v1.5.0 and before

CWE

CWE-656

References

https://github.com/aliasrobotics/RVD/issues/3323

ADP enrichment

CVE

No English description supplied.

https://github.com/aliasrobotics/RVD/issues/3323