Lucene search
HistoryAug 10, 2022 - 11:15 a.m.
CVE-2022-2242
kuka systemsoftware
access control
unauthorized access
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
62.1%
The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).
Affected configurations
Node
kukasystemsoftware_v\/kssRange8.2–8.6.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kuka | systemsoftware_v\/kss | * | cpe:2.3:a:kuka:systemsoftware_v\/kss:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2022-2242 KUKA V/KSS WoV SH access control vulnerability
2022-08-10 10:20:19
prion
prion
Improper access control
2022-08-10 11:15:00
cve
cve
CVE-2022-2242
2022-08-10 11:15:08
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
62.1%
Related for NVD:CVE-2022-2242