{"id":"CVE-2021-22279","aliases":["EUVD-2021-9425","GHSA-568v-wj37-w729"],"status":"published","title":"OmniCore RobotWare Missing Authentication Vulnerability","description":"A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01488,"percentile":0.74396,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2021-12-13T15:48:03Z","modified":"2026-06-17T03:36:55Z","products":[{"vendor":"abb","product":"omnicore_c30_firmware"},{"vendor":"abb","product":"robotware"}],"references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=SI20265\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22279"},{"url":"https://github.com/advisories/GHSA-568v-wj37-w729"}],"sources":{"cve":[{"id":"CVE-2021-22279","title":"OmniCore RobotWare Missing Authentication Vulnerability","description":"A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.","status":"published","published":"2021-12-13T15:48:03.846Z","modified":"2024-09-16T17:38:50.816Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:32:57.701381Z"}],"euvd":[{"id":"EUVD-2021-9425","description":"A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.","status":"published","published":"2021-12-13T15:48:03Z","modified":"2024-09-16T17:38:50Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:55:40.170355Z"}],"ghsa":[{"id":"GHSA-568v-wj37-w729","title":"A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an...","description":"A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.","status":"published","published":"2021-12-14T00:00:50Z","modified":"2023-02-01T05:07:04Z","cwes":["CWE-306"],"updated_at":"2026-11-02T14:50:28.399252Z"}],"nvd":[{"id":"CVE-2021-22279","description":"A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.","status":"published","published":"2021-12-13T16:15:08.59Z","modified":"2026-06-17T03:36:55.623Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:07:02.189991Z"}]}}