CVE-2022-2242

Published: Aug 10, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: info@cert.vde.com (Secondary)

Description

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Affected (1)

Products: Kuka: Systemsoftware V/kss

Kuka

1 product

Systemsoftware V/kss

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kuka Systemsoftware V/kss	From 8.2 to 8.6.5

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://www.kuka.com/advisories-CVE-2022-2242

Source: info@cert.vde.com

MitigationVendor Advisory

https://www.kuka.com/advisories-CVE-2022-2242

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.