CVE-2020-10287

CVE-2020-10287 affects ABB IRC5 controllers and associated IRB140 robots, stemming from the use of publicly documented default credentials for the UAS service. This critical vulnerability (CVSS 9.8) allows unauthenticated remote attackers to gain full control over affected systems, leading to complete compromise of confidentiality, integrity, and availability. While ABB considers this a documented feature, widespread use of these defaults in production environments creates a significant exposure. There is no evidence of active exploitation or public exploit code, but the vulnerability has garnered significant community discussion, indicating awareness among security researchers.