the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.
Weakness
The product uses a protection mechanism whose strength depends heavily on its obscurity, such that knowledge of its algorithms or key data is sufficient to defeat the mechanism.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xarm_5_lite_firmware | Ufactory | * | 1.5.0 (including) |