{"id":"CVE-2019-19108","aliases":["EUVD-2019-8744","GHSA-wrx9-6qv7-wvvw"],"status":"published","title":"B\u0026R Automation Runtime SNMP Authentication and Authorization Weakness","description":"An authentication weakness in the SNMP service in B\u0026R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B\u0026R products via SNMP.","severity":{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01645,"percentile":0.76618,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2020-04-20T21:48:29Z","modified":"2026-06-17T02:26:10Z","products":[{"vendor":"b\u0026r","product":"automation runtime"},{"vendor":"b\u0026r industrial automation gmbh","product":"automation runtime"},{"vendor":"br-automation","product":"automation_runtime"},{"vendor":"br-automation","product":"automation_studio"}],"references":[{"url":"https://www.br-automation.com/en/downloads/012020-automation-runtime-snmp-authentication-weakness/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.us-cert.gov/ics/advisories/icsa-20-051-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19108"},{"url":"https://github.com/advisories/GHSA-wrx9-6qv7-wvvw"}],"sources":{"cve":[{"id":"CVE-2019-19108","title":"B\u0026R Automation Runtime SNMP Authentication and Authorization Weakness","description":"An authentication weakness in the SNMP service in B\u0026R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B\u0026R products via SNMP.","status":"published","published":"2020-04-20T21:48:29Z","modified":"2024-08-05T02:09:39.34Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:20:20.74896Z"}],"euvd":[{"id":"EUVD-2019-8744","description":"An authentication weakness in the SNMP service in B\u0026R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B\u0026R products via SNMP.","status":"published","published":"2020-04-20T21:48:29Z","modified":"2024-08-05T02:09:39Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T02:40:26.287407Z"}],"ghsa":[{"id":"GHSA-wrx9-6qv7-wvvw","title":"An authentication weakness in the SNMP service in B\u0026R Automation Runtime versions 2.96, 3.00, 3...","description":"An authentication weakness in the SNMP service in B\u0026R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B\u0026R products via SNMP.","status":"published","published":"2022-05-24T17:15:54Z","modified":"2023-01-29T05:02:16Z","updated_at":"2026-11-02T14:45:02.517815Z"}],"nvd":[{"id":"CVE-2019-19108","description":"An authentication weakness in the SNMP service in B\u0026R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B\u0026R products via SNMP.","status":"published","published":"2020-04-20T22:15:13.51Z","modified":"2026-06-17T02:26:10.9Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:05:46.451008Z"}]}}