OS Command Injection in Universal Robots PolyScope

Executive Summary

This vulnerability is an OS command injection in the Dashboard Server interface of Universal Robots PolyScope versions prior to 5.21.1. It allows an unauthenticated attacker to craft commands that will execute arbitrary code on the robot's operating system.

Useful 0 Not Useful 0

Impact Analysis

An attacker exploiting this vulnerability can execute arbitrary code on the robot's OS without authentication. This can lead to full compromise of the robot, including unauthorized control, disruption of operations, and potential damage to the robot or its environment.

Useful 0 Not Useful 0

Detection Guidance

The vulnerability involves OS command injection via the Universal Robots Dashboard Server interface, which communicates over TCP/IP on port 29999.

To detect this vulnerability on your network or system, you can monitor or attempt to connect to the Dashboard Server on port 29999 using tools like HyperTerminal or SocketTest.

By sending crafted commands ending with a newline to the Dashboard Server, you may observe if unauthorized command execution is possible, indicating the presence of the vulnerability.

• Use a TCP client tool (e.g., SocketTest) to connect to the robot's IP on port 29999.
• Send legitimate Dashboard Server commands to verify normal operation.
• Attempt to send crafted commands that include OS command injection payloads to test if code execution occurs.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability allows unauthenticated OS command injection via the Dashboard Server interface on port 29999.

Immediate mitigation steps include restricting or disabling access to the Dashboard Server interface on port 29999 from untrusted networks.

Ensure that only trusted users and systems can communicate with the Dashboard Server by implementing network-level controls such as firewalls or VPNs.

Monitor and audit any access attempts to the Dashboard Server to detect suspicious activity.

Plan to upgrade Universal Robots PolyScope to version 5.21.1 or later, where this vulnerability is fixed.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthenticated attackers to execute OS commands on the robot, potentially leading to unauthorized access and control over the system. This could result in compromise of data confidentiality, integrity, and availability.

Such a security breach may impact compliance with standards and regulations like GDPR and HIPAA, which require protection of sensitive data and secure system operations. Unauthorized code execution could lead to data breaches or operational disruptions, violating these regulatory requirements.

Useful 0 Not Useful 0