CVE-2018-10635: Universal-Robots CB3.1 Firmware

Critical severity, CVSS 9.8. EPSS: 5.1% chance of exploitation in the next 30 days.

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained.

Affected products

• Universal-Robots CB3.1 Firmware: version 3.4.5-100 only

Published 2018-07-11. Last modified 2026-06-17.