Skip to contentB&r Industrial Automation vulnerabilities
Newest
- b&r industrial automation automation runtimeAutomation Runtime SDM requests may impact systemCVE-2025-34509.3 Critical
- b&r industrial automation aprolPrivilege escalation in B&R APROLCVE-2024-454828.5 High
- b&r industrial automation aprolImproper authentication in SSH of B&R APROLCVE-2024-454818.5 High
- b&r industrial automation aprolUnauthorized local file reading in B&R APROLCVE-2024-454809.2 Critical
- b&r industrial automation aprolImproper Handling of Insufficient Permissions or Privileges in B&R APROLCVE-2024-83156.8 Medium
- b&r industrial automation automation runtime, mapp view +1 moreA “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used...CVE-2024-86038.2 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreReflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROLCVE-2024-56245.1 Medium
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreUntrusted search path vulnerability in B&R APROLCVE-2024-56235.4 Medium
- b&r industrial automation aprol, b and r industrial automotion and r aprol, br-automation industrial automation aprol +2 moreUntrusted search path vulnerability in the AprolConfigureCCServices of B&R APROLCVE-2024-56227.3 High
- b&r industrial automation automation runtimeIP Forwarding enabled in B&R Automation RuntimeCVE-2024-58015.3 Medium
- b&r industrial automation automation runtimeDiffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation RuntimeCVE-2024-58008.3 High
- b&r industrial automation automation studioDLL Hijacking Vulnerability in Automation StudioCVE-2021-222807.2 High
- b&r industrial automation adi .net sdk, adi development kit, adi driver universal +22 more +24 moreInsecure Loading of Code in B&R ProductsCVE-2024-26377.2 High
- b&r industrial automation automation studio, technology guarding +1 moreB&R products use insufficient communication encryptionCVE-2024-02208.3 High
- b&r industrial automation automation runtimeSDM Web interface vulnerable to XSSCVE-2023-60286.1 Medium
- b&r industrial automation automation runtimeFTP uses unsecure encryption mechanismsCVE-2024-03239.8 Critical
- b&r industrial automation automation studioZip Slip Vulnerability in B&R Automation Studio Project ImportCVE-2021-222816.3 Medium
- b&r industrial automation automation studio, net/pvi, br-automation automation net\/pvi +2 moreAutomation Studio and PVI Multiple unquoted service path vulnerabilitiesCVE-2020-246827.2 High
- b&r industrial automation automation studio, net/pvi +1 moreAutomation Studio and PVI Multiple incorrect permission assignments for servicesCVE-2020-246818.2 High
- b&r industrial automation automation studioRCE in B&R Automation Studio with crafted project filesCVE-2021-222828.3 High
- b&r industrial automation automation runtimeAllocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B...CVE-2023-32428.6 High
- b&r industrial automation vc4Improper Authentication Mechanism in B&R VC4 VisualizationCVE-2023-16179.8 Critical
- b&r industrial automation automation runtimeReflected Cross-Site Scripting Vulnerabilities in Automation RuntimeCVE-2022-42866.1 Medium
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreDoS in APROLs Tbase serverCVE-2022-437657.5 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreBuffer overflow when changing configuration on Tbase ServerCVE-2022-437649.8 Critical
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreLack of checking preconditions in APROLCVE-2022-437637.5 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreMemory leak when receiving messages in APROL Tbase serverCVE-2022-437627.5 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreLack of authentication when managing APROL databaseCVE-2022-437619.4 Critical
- b&r industrial automation automation studio, br-automation studio +1 moreRCE through Project Upload from TargetCVE-2021-222898.3 High
- b&r automation studioPrivilege escalation via B&R Automation Studio upgrade serviceCVE-2019-191007.5 High
- b&r automation studioZip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade serviceCVE-2019-191025.5 Medium
- b&r automation studioIncomplete communication encryption and validation in B&R Automation Studio upgrade serviceCVE-2019-191016.5 Medium