Description (CNA)
Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our PoC we demonstrate how a malicious actor could 'cook' a custom URCap that when deployed by the user (intendedly or unintendedly) compromises the system
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Universal Robots / URx | affected unspecified |
CWE
CWE-250
References
ADP enrichment
No English description supplied.