AR
Product
Automation Runtime
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch
Add Automation Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-0323 | 9.8 | Feb 5 | The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1 Affected: through i4.93 |
| CVE-2019-19108 | 9.4 | Apr 20 | An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to… Affected: 3.08 through 3.10; 4.00 through 4.03; 4.04 through 4.63; 2.96; 3.00; 3.01; +3 more |
| CVE-2021-22275 | 8.6 | May 13 | Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of… Affected: before 4.91 |
| CVE-2024-5800 | 7.5 | Aug 10 | Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime Affected: before 6.0.2 |
| CVE-2020-11637 | 7.5 | Oct 15 | A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network… Affected: through 4.10; 4.20 before n4.26; 4.40 before f4.45; 4.50 before e4.53; 4.60 before d4.63; 4.70 before a4.73; +1 more |
| CVE-2023-6028 | 6.1 | Feb 5 | A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that enables a remote… Affected: before i4.93 |
| CVE-2022-4286 | 6.1 | Feb 14 | A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to… Affected: 3.00 through c4.93 |
| CVE-2023-3242 | 5.9 | Jul 26 | Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated network-based attackers to cause permanent… Affected: before g4.93 |
Showing 8