CVE-2022-2242

CRITICAL

9.8

Description

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/10/2022

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

kuka:systemsoftware_v\/kss

Faiblesses (CWE)

CWE-306

References

https://www.kuka.com/advisories-CVE-2022-2242(info@cert.vde.com)

https://www.kuka.com/advisories-CVE-2022-2242(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.