Authentication bypass in SW and CB - CVE-2018-10635

Detailed vulnerability description

The vulnerability allows a remote attacker to bypass authentication on the target system.

The vulnerability exists due to ports 30001/TCP to 30003/TCP listen for arbitrary URScript code. A remote unauthenticated attacker who has access to the ports can bypass authentication and execute arbitrary code that may allow root access to be obtained.

How to mitigate CVE-2018-10635

Universal Robots recommends the follow remedial actions:

• Only allow trusted users physical access to the robot control box and teach pendant.
• Do not connect the robot to a network unless it is required by the application.
• Do not connect the robot directly to the internet. Use a secure network with proper firewall configuration (Ports 30001/TCP to 30003/TCP must be restricted).
• Make the private subnet where the robot network interface is exposed as small as possible.

Sources

• https://ics-cert.us-cert.gov/advisories/ICSA-18-191-01