KUKA manufactures industrial robotic systems and control software for manufacturing automation, with a focused product portfolio centered on robotic controllers such as the KR C4 and associated firmware, supplemented by simulation and licensing infrastructure. Vulnerabilities affecting the vendor skew strongly toward critical severity and recur through durable authentication and credential-management weaknesses—missing authentication for critical functions, hard-coded credentials, and exposed dangerous methods—alongside exposure of sensitive information and unprotected inter-component communication, all of which reflect the operational-technology deployment context where direct network access and legacy design patterns are common. Defenders managing KUKA robotic systems should prioritize inventory, network segmentation, and timely patching of controllers and their associated software; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Kuka over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-2242CRITICAL The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when acces | Aug 10, 2022 | 9.8 | 30 | NO | NO |
CVE-2021-33016CRITICAL An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product runn | May 26, 2022 | 9.8 | 30 | NO | NO |
CVE-2021-33014HIGH An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS. | May 26, 2022 | 8.8 | 28 | NO | NO |
CVE-2020-10292HIGH Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components so | Nov 6, 2020 | 8.2 | 21 | NO | NO |
CVE-2020-10291HIGH Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components so | Nov 6, 2020 | 7.5 | 19 | NO | NO |
CVE-2020-10635MEDIUM Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA. When these devices request a model, the server transmits the model in plaintext. | Feb 24, 2022 | 4.3 | 18 | NO | NO |
CVE-2020-10268MEDIUM Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be | Jun 16, 2020 | 6.1 | 17 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Kuka.
Media articles that mention a CVE ID that affects a product developed by Kuka — matched by CVE ID, not by vendor name.