Br-automation vulnerabilities

Products

• Industrial Automation Aprol 16
• Automation Studio 10
• Automation Runtime 9
• Gatemanager 4260 Firmware 4
• Gatemanager 8250 Firmware 4
• Gatemanager 9250 Firmware 4
• Sitemanager 2
• Vc4 2

Newest

• b&r industrial automation aprol, br-automation industrial automation aprol +1 more Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL CVE-2024-5624 5.1 MediumAugust 29, 2024
• b&r industrial automation aprol, br-automation industrial automation aprol +1 more Untrusted search path vulnerability in B&R APROL CVE-2024-5623 5.4 MediumAugust 29, 2024
• b&r industrial automation aprol, b and r industrial automotion and r aprol, br-automation industrial automation aprol +2 more Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL CVE-2024-5622 7.3 HighAugust 29, 2024
• b&r industrial automation automation runtime Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime CVE-2024-5800 8.3 HighAugust 10, 2024
• b&r industrial automation automation studio DLL Hijacking Vulnerability in Automation Studio CVE-2021-22280 7.2 HighMay 14, 2024
• b&r industrial automation adi .net sdk, adi development kit, adi driver universal +22 more +24 more Insecure Loading of Code in B&R Products CVE-2024-2637 7.2 HighMay 14, 2024
• b&r industrial automation automation studio, technology guarding +1 more B&R products use insufficient communication encryption CVE-2024-0220 8.3 HighFebruary 22, 2024
• b&r industrial automation automation runtime SDM Web interface vulnerable to XSS CVE-2023-6028 6.1 MediumFebruary 5, 2024
• b&r industrial automation automation runtime FTP uses unsecure encryption mechanisms CVE-2024-0323 9.8 CriticalFebruary 5, 2024
• b&r industrial automation automation studio Zip Slip Vulnerability in B&R Automation Studio Project Import CVE-2021-22281 6.3 MediumFebruary 2, 2024
• b&r industrial automation automation studio, net/pvi, br-automation automation net\/pvi +2 more Automation Studio and PVI Multiple unquoted service path vulnerabilities CVE-2020-24682 7.2 HighFebruary 2, 2024
• b&r industrial automation automation studio, net/pvi +1 more Automation Studio and PVI Multiple incorrect permission assignments for services CVE-2020-24681 8.2 HighFebruary 2, 2024
• b&r industrial automation automation studio RCE in B&R Automation Studio with crafted project files CVE-2021-22282 8.3 HighFebruary 2, 2024
• b&r industrial automation automation runtime Allocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B... CVE-2023-3242 8.6 HighJuly 26, 2023
• b&r industrial automation vc4 Improper Authentication Mechanism in B&R VC4 Visualization CVE-2023-1617 9.8 CriticalApril 14, 2023
• b&r industrial automation automation runtime Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime CVE-2022-4286 6.1 MediumFebruary 14, 2023
• b&r industrial automation aprol, br-automation industrial automation aprol +1 more DoS in APROLs Tbase server CVE-2022-43765 7.5 HighFebruary 8, 2023
• b&r industrial automation aprol, br-automation industrial automation aprol +1 more Buffer overflow when changing configuration on Tbase Server CVE-2022-43764 9.8 CriticalFebruary 8, 2023
• b&r industrial automation aprol, br-automation industrial automation aprol +1 more Lack of checking preconditions in APROL CVE-2022-43763 7.5 HighFebruary 8, 2023
• b&r industrial automation aprol, br-automation industrial automation aprol +1 more Memory leak when receiving messages in APROL Tbase server CVE-2022-43762 7.5 HighFebruary 8, 2023
• b&r industrial automation aprol, br-automation industrial automation aprol +1 more Lack of authentication when managing APROL database CVE-2022-43761 9.4 CriticalFebruary 8, 2023
• b&r industrial automation automation studio, br-automation studio +1 more RCE through Project Upload from Target CVE-2021-22289 8.3 HighAugust 11, 2022
• b&r automation automation runtime webserver, br-automation automation runtime +1 more Denial of service vulnerability on Automation Runtime webserver CVE-2021-22275 8.6 HighMay 13, 2022
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get... CVE-2019-19878 7.5 HighNovember 27, 2020
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get... CVE-2019-19877 5.3 MediumNovember 27, 2020
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script... CVE-2019-19876 9.8 CriticalNovember 27, 2020
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands... CVE-2019-19875 9.8 CriticalNovember 27, 2020
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in... CVE-2019-19874 9.8 CriticalNovember 27, 2020
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get... CVE-2019-19873 7.5 HighNovember 27, 2020
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader... CVE-2019-19872 9.8 CriticalNovember 27, 2020
• br-automation industrial automation aprol An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be... CVE-2019-19869 7.5 HighNovember 27, 2020
• b&r automation runtime Automation Runtime TFTP Service DoS Vulnerability CVE-2020-11637 5.8 MediumOctober 15, 2020
• b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more GateManager Log Information Disclosure Vulnerability CVE-2020-11646 4.3 MediumOctober 15, 2020
• b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more GateManager Denial of Service Vulnerability CVE-2020-11645 6.5 MediumOctober 15, 2020
• b&r sitemanager SiteManager Denial of Service via Local File Inclusion Vulnerability CVE-2020-11642 7.7 HighOctober 15, 2020
• b&r sitemanager SiteManager Local File Inclusion Vulnerability CVE-2020-11641 7.7 HighOctober 15, 2020
• b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more GateManager Audit Message Spoofing Vulnerability CVE-2020-11644 6.5 MediumOctober 15, 2020
• b&r gatemanager, br-automation gatemanager 4260 firmware, gatemanager 8250 firmware +1 more +3 more GateManager Information Disclosure Vulnerability CVE-2020-11643 6.5 MediumOctober 15, 2020
• b&r automation studio Privilege escalation via B&R Automation Studio upgrade service CVE-2019-19100 7.5 HighApril 29, 2020
• b&r automation studio Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service CVE-2019-19102 5.5 MediumApril 29, 2020
• b&r automation studio Incomplete communication encryption and validation in B&R Automation Studio upgrade service CVE-2019-19101 6.5 MediumApril 29, 2020
• b&r automation runtime, br-automation automation studio +1 more B&R Automation Runtime SNMP Authentication and Authorization Weakness CVE-2019-19108 9.4 CriticalApril 20, 2020