Mike Karamousadakis

**Name of the Vulnerable Software and Affected Versions** UR+ (Universal Robots+) (affected versions not specified) **Description** The issue concerns the lack of integrity checks when installing components in Universal Robots robots through the UR+ platform. An attacker can exploit this by crafting a custom component using the easily obtainable SDK, potentially leading to Person-In-The-Middle (PITM) attacks. The attacker could then ship the malicious component, posing a risk to the robots' security. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.