high8.8
CVE-2020-10286
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gai…
Impact
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ufactory | Xarm 5 Lite Firmware | through 1.5.0 |
| Ufactory | Xarm 6 Firmware | All versions |
| Ufactory | Xarm 7 Firmware | All versions |