CVE-2022-2242

9.8 criticalEPSS 1.2%

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2022-08-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kuka:systemsoftware_v\/kss

References

https://www.kuka.com/advisories-CVE-2022-2242
https://www.kuka.com/advisories-CVE-2022-2242

Check your stack JSON