Login Request a demo
BR
Vendor
Br-automation
11 products with CVEs on record
52
CVEs
0
On KEV
0
New 30D
Products
IA
Industrial Automation Aprol
Br-automation
9.8
16 CVEs0 on KEV0 new
AS
Automation Studio
Br-automation
9.4
10 CVEs0 on KEV0 new
AR
Automation Runtime
Br-automation
9.8
8 CVEs0 on KEV0 new
G4
Gatemanager 4260 Firmware
Br-automation
6.5
4 CVEs0 on KEV0 new
G8
Gatemanager 8250 Firmware
Br-automation
6.5
4 CVEs0 on KEV0 new
G9
Gatemanager 9250 Firmware
Br-automation
6.5
4 CVEs0 on KEV0 new
SI
Sitemanager
Br-automation
6.5
2 CVEs0 on KEV0 new
AN
Automation Net/pvi
Br-automation
7.8
1 CVEs0 on KEV0 new
ST
Studio
Br-automation
9.8
1 CVEs0 on KEV0 new
TG
Technology Guarding
Br-automation
8.1
1 CVEs0 on KEV0 new
VC
Vc4
Br-automation
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-5624
IA
Industrial Automation Aprol
Br-automation
6.1
0%
Aug 29Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL
CVE-2024-5623
IA
Industrial Automation Aprol
Br-automation
7.8
0%
Aug 29Untrusted search path vulnerability in B&R APROL
CVE-2024-5622
IA
Industrial Automation Aprol
Br-automation
7.8
0%
Aug 29Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL
CVE-2024-5800
AR
Automation Runtime
Br-automation
7.5
0%
Aug 10Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime
CVE-2021-22280
AS
Automation Studio
Br-automation
7.2
0%
May 14Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code in the context of the product
CVE-2024-0220
AS
Automation Studio
Br-automation
8.1
0%
Feb 22B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers
CVE-2023-6028
AR
Automation Runtime
Br-automation
6.1
0%
Feb 5A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that enables a remote…
CVE-2024-0323
AR
Automation Runtime
Br-automation
9.8
0%
Feb 5The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1
CVE-2021-22281
AS
Automation Studio
Br-automation
7.5
0%
Feb 2: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12
CVE-2020-24682
AS
Automation Studio
Br-automation
7.8
0%
Feb 2Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated…
CVE-2021-22282
AS
Automation Studio
Br-automation
7.8
0%
Feb 2Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation…
CVE-2020-24681
AS
Automation Studio
Br-automation
8.8
0%
Feb 2Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation…
CVE-2023-3242
AR
Automation Runtime
Br-automation
5.9
1%
Jul 26Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated network-based attackers to cause permanent…
CVE-2023-1617
VC
Vc4
Br-automation
9.8
1%
Apr 14Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may allow an unauthenticated network-based attacker to bypass…
CVE-2022-4286
AR
Automation Runtime
Br-automation
6.1
1%
Feb 14A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to…
CVE-2022-43765
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Feb 8B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application…
CVE-2022-43764
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Feb 8Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow
CVE-2022-43763
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Feb 8Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions < R 4.2-07
CVE-2022-43762
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Feb 8Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
CVE-2022-43761
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Feb 8Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system configuration
CVE-2021-22289
ST
Studio
Br-automation
9.8
1%
Aug 11Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code
CVE-2021-22275
AR
Automation Runtime
Br-automation
8.6
1%
May 13Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of…
CVE-2019-19878
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19877
IA
Industrial Automation Aprol
Br-automation
5.3
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19876
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19875
IA
Industrial Automation Aprol
Br-automation
9.8
2%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19874
IA
Industrial Automation Aprol
Br-automation
9.8
2%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19873
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19872
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19869
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2020-11637
AR
Automation Runtime
Br-automation
7.5
1%
Oct 15A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network…
CVE-2020-11646
G9
Gatemanager 9250 Firmware
Br-automation
4.3
1%
Oct 15A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view log…
CVE-2020-11645
G9
Gatemanager 9250 Firmware
Br-automation
6.5
1%
Oct 15A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit…
CVE-2020-11644
G9
Gatemanager 9250 Firmware
Br-automation
6.5
1%
Oct 15The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to…
CVE-2020-11643
G9
Gatemanager 9250 Firmware
Br-automation
6.5
1%
Oct 15An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view…
CVE-2020-11642
SI
Sitemanager
Br-automation
6.5
1%
Oct 15The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances
CVE-2020-11641
SI
Sitemanager
Br-automation
6.5
1%
Oct 15A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances
CVE-2019-19102
AS
Automation Studio
Br-automation
7.5
1%
Apr 29A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to…
CVE-2019-19101
AS
Automation Studio
Br-automation
5.9
1%
Apr 29A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, <…
CVE-2019-19100
AS
Automation Studio
Br-automation
7.1
0%
Apr 29A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <
CVE-2019-19108
AR
Automation Runtime
Br-automation
9.4
2%
Apr 20An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to…