CVE-2020-10276

CVE-2020-10276 describes a critical vulnerability affecting easyrobotics, mobile-industrial-robots, and uvd-robots, stemming from the use of a default, easily discoverable password for the safety PLC. An attacker can exploit this by uploading a manipulated program, effectively disabling emergency stop functionalities and potentially altering laser scanner configurations, making detection difficult until an incident occurs. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows for unauthenticated, low-complexity network attacks resulting in complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness despite a lack of media coverage.