What is CVE-2021-33014?

CVE-2021-33014 is a high-severity vulnerability in Kuka Kr C4, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2022-05-26.

How severe is CVE-2021-33014?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Kuka Kr C4

CVE-2021-33014

An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

EPSS: 0.009 (54.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Kuka Kr C4 — versions All
Kuka Kr_c4
Kuka Kr_c4_firmware
Kuka Kss
Kuka Kss (Kuka.systemsoftware) — versions All

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-33014?: CVE-2021-33014 is a high-severity vulnerability in Kuka Kr C4, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2022-05-26.
How severe is CVE-2021-33014?: High severity. CVSS v3 base score is 8.8 out of 10.