What is CVE-2020-10286?

CVE-2020-10286 is a high-severity vulnerability in Ufactory Xarm_5_lite, classified under CWE-656. CVSS score: 8.8/10. Published 2020-07-15.

How severe is CVE-2020-10286?

High severity. CVSS v3 base score is 8.8 out of 10.

Privilege escalation in Ufactory Xarm_5_lite

CVE-2020-10286

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that dis…

EPSS: 0.007 (50.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ufactory Xarm_5_lite
Ufactory Xarm_5_lite_firmware
Ufactory Xarm 5 Lite, 6 And 7 — versions v1.5.0 and before
Ufactory Xarm_6
Ufactory Xarm_6_firmware
Ufactory Xarm_7
Ufactory Xarm_7_firmware

Weakness classification (CWE)

References

cve@aliasrobotics.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2020-10286?: CVE-2020-10286 is a high-severity vulnerability in Ufactory Xarm_5_lite, classified under CWE-656. CVSS score: 8.8/10. Published 2020-07-15.
How severe is CVE-2020-10286?: High severity. CVSS v3 base score is 8.8 out of 10.