CVE-2021-33016: Kuka Kr c4 Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An attacker can gain full access (read/write/delete) to sensitive folders due to hard-coded credentials on KUKA KR C4 control software for versions prior to 8.7 or any product running KSS.

Affected products

• Kuka Kr c4 Firmware: before 8.7 (fixed in 8.7)
• Kuka Kss: any version

Published 2022-05-26. Last modified 2026-06-17.