by Kastro
Paper/Archive/CVE-2022-2242

CVE-2022-2242

KUKA SystemSoftware V/KSS — KUKA V/KSS WoV SH access control vulnerability

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.6.686 × 2013.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Affected

ProductAffectedFixed inSource
SystemSoftware V/KSS8.2 – < 8.6.58.6.5CNA

Scores by source

CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refkuka.com/advisories-CVE-2022-2242