CVE-2020-10288

CVE-2020-10288 describes a critical authentication bypass vulnerability in the FTP server of ABB IRC5 and Wind River VxWorks-based products, including ABB IRB140 and RobotWare. This flaw allows an unauthenticated attacker to gain full access to the FTP server by simply providing any non-empty username and password, bypassing intended security controls. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.