What’s Vulnerable › Vulnerabilities
CVE-2022-2242: KUKA V/KSS WoV SH access control vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-08-10 · updated 2026-06-17
- Weakness: CWE-306
Description
The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not available or not enabled (default).
Affected products
- KUKA SystemSoftware V/KSS: from 8.2 before 8.6.5 — fixed in 8.6.5
How to fix
Upgrade to a fixed version: KUKA SystemSoftware V/KSS 8.6.5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2022-2242 or the next vulnerability affects your stack