CVE-2021-33014: Kuka Kr c4 Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

Affected products

• Kuka Kr c4 Firmware: before 8.7 (fixed in 8.7)
• Kuka Kss: any version

Published 2022-05-26. Last modified 2026-06-17.