PT-2020-12035 · Ufactory · Xarm 5 Lite+3

Alfonso Glera + 1 · Published 2020-07-15 · Updated 2021-12-21 · CVE-2020-10286

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned, so the information cannot be provided.

Description The main user account has restricted privileges but is in the sudoers group. There is no mechanism in place to prevent the use of sudo su or sudo -i, which can be used to gain unrestricted access to sensitive files, encryption, or issue orders that disrupt robot operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-656

Related Identifiers

CVE-2020-10286

Affected Products

Xarm 5 Lite

Xarm 5 Lite Firmware

Xarm 6 Firmware

Xarm 7 Firmware

References · 4

• https://osv.dev/vulnerability/CVE-2020-10286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10286 · Security Note
• https://github.com/aliasrobotics/RVD/issues/3323 · Note
• https://t.me/cvenotify/5088 · Telegram Post