by Kastro
Paper/Archive/CVE-2021-22279

CVE-2021-22279

ABB RobotWare — OmniCore RobotWare Missing Authentication Vulnerability

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.1.741 × 2014.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.

Affected

ProductAffectedFixed inSource
RobotWareunspecified – < 7.3.27.3.2CNA

Scores by source

ABB (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsearch.abb.com/library/Download.aspx?DocumentID=SI20265&LanguageCode=en&DocumentPartId=&Action=Launch