← Back

Xarm 5 Lite Firmware

xarm_5_lite_firmware

Vendor: Ufactory • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-10286
1Ufactory
3Xarm 5 Lite Firmware
Xarm 6 FirmwareXarm 7 Firmware
Jun 17, 2026
Jul 15, 2020
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or is...Show more
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.Show less
CVE-2020-10285
1Ufactory
1Xarm 5 Lite Firmware
Jun 17, 2026
Jul 15, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.