← Back

Ufactory

ufactory

3 CVEs • 7 products

Products (7)

Click to collapse
Toggle
Xarm 5 Lite Firmware
xarm_5_lite_firmware
2 CVEs
Xarm Studio
xarm_studio
1 CVE
Xarm 6 Firmware
xarm_6_firmware
1 CVE
Xarm 7 Firmware
xarm_7_firmware
1 CVE
Xarm 5 Lite
xarm_5_lite
0 CVEs
Xarm 6
xarm_6
0 CVEs
Xarm 7
xarm_7
0 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-10286
1Ufactory
3Xarm 5 Lite Firmware
Xarm 6 FirmwareXarm 7 Firmware
Jun 17, 2026
Jul 15, 2020
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or is...Show more
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.Show less
CVE-2020-10285
1Ufactory
1Xarm 5 Lite Firmware
Jun 17, 2026
Jul 15, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.
CVE-2020-10284
1Ufactory
1Xarm Studio
Jun 17, 2026
Jul 15, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is m...Show more
No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.Show less