CVSS 3.1
8.8 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-10286
High (8.8) in ufactory. EPSS 0.7% chance of exploitation in the next 30 days.
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-269, CWE-656
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ufactory:xarm_5_lite_firmware
- ufactory:xarm_6_firmware
- ufactory:xarm_7_firmware