CVE-2020-10265: Universal-Robots Ur Software

Critical severity, CVSS 9.4. EPSS: 1.5% chance of exploitation in the next 30 days.

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safety and more. The DashBoard server is not protected by any kind of authentication or authorization.

Affected products

• Universal-Robots Ur Software: from 3.0.14989, up to and including 3.3.3.292; from 1.4; from 5.0

Published 2020-04-06. Last modified 2026-06-17.