Browse all 3 CVE security advisories affecting uFactory. AI-powered Chinese analysis, POCs, and references for each vulnerability.
uFactory develops industrial automation and robotics solutions, primarily serving manufacturing environments with collaborative robots and motion control systems. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure default configurations. While no major public security incidents have been documented, the three CVEs on record highlight consistent weaknesses in web interfaces and firmware that could allow unauthorized access or system compromise. Their security posture appears reactive rather than proactive, with patches typically issued only after vulnerabilities are disclosed, leaving potential exposure windows for deployed systems.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2020-10286 | RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS — xArm 5 Lite, xArm 6 and xArm 7CWE-656 | 8.8 | - | 2020-07-15 |
| CVE-2020-10285 | RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks — xArm5 Lite, xArm 6 and xArm 7CWE-307 | 9.8 | - | 2020-07-15 |
| CVE-2020-10284 | RVD#3321: No Authentication required to exert manual control of the robot — xArm5 Lite, xArm 6 and xArm 7CWE-656 | 8.1 | - | 2020-07-15 |
This page lists every published CVE security advisory associated with uFactory. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.