CVE-2022-2242 - CVE House

Status published Critical CVE-2022-2242

KUKA V/KSS WoV SH access control vulnerability

9.8 CVSS

Vulnerability Description

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2242

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.kuka.com/advisories-CVE-2022-2242

More from KUKA

View All →

CVE-2021-33016

KUKA KR C4 - Use of Hard-Coded Credentials

Critical 9.8

CVE-2021-33014

KUKA KR C4 - Use of Hard-Coded Credentials

High 8.8

CVE-2020-10635

ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Medium 4.3

Affected Vendor

KUKA

View all reports →

Affected Software

SystemSoftware V/KSS

Vulnerable Versions:

8.2

Timeline

Official Publish: August 10th, 2022

Last Modified: September 17th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application