Universal Robots manufactures a focused line of collaborative industrial robot arms and control software widely deployed across manufacturing and automation environments. Vulnerabilities affecting this vendor have centered on its UR-series collaborative robots and associated software platforms, reflecting the operational-technology deployment context and control-system integration requirements of the product family. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Universal Robots over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-10265CRITICAL Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server | Apr 6, 2020 | 9.4 | 29 | NO | NO |
CVE-2018-10635CRITICAL In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a rem | Jul 11, 2018 | 9.8 | 29 | NO | NO |
CVE-2018-10633CRITICAL Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the controller. | Jul 11, 2018 | 9.8 | 28 | NO | NO |
CVE-2020-10264HIGH CB3 SW Version 3.3 and upwards, e-series SW Version 5.0 and upwards allow authenticated access to the RTDE (Real-Time Data Exchange) interface on port 30004 which allows setting re | Apr 6, 2020 | 8.8 | 22 | NO | NO |
CVE-2020-10266HIGH UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR | Apr 6, 2020 | 8.1 | 20 | NO | NO |
CVE-2020-10267HIGH Universal Robots control box CB 3.1 across firmware versions (tested on 1.12.1, 1.12, 1.11 and 1.10) does not encrypt or protect in any way the intellectual property artifacts inst | Apr 6, 2020 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Universal Robots.
Media articles that mention a CVE ID that affects a product developed by Universal Robots — matched by CVE ID, not by vendor name.