CVE-2020-10290: Sintef Urx

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our PoC we demonstrate how a malicious actor could 'cook' a custom URCap that when deployed by the user (intendedly or unintendedly) compromises the system

Affected products

• Sintef Urx: affected versions not specified

Published 2020-08-21. Last modified 2026-06-17.