B&r Industrial Automation vulnerabilities
49 CVEs and advisories name B&r Industrial Automation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-79679Use of Weak Credentials
- CVE-2026-6901Untrusted Search Path
- CVE-2026-6900Improper Certificate Validation
- CVE-2025-11482Allocation of Resources Without Limits or Throttling in the OPC-UA Server
- CVE-2026-0936Insertion of Sensitive Information into Logfile
- CVE-2025-11044Vulnerability on Automation Runtime my cause DoS Conditions
- CVE-2025-11043Improper Server Certificate Validation in Automation Studio
- CVE-2025-11498CSV Formula Injection Vulnerability
- CVE-2025-3449Weak Session Token used in Automation Runtime SDM
- CVE-2025-3448XSS on SDM
- CVE-2025-3450Automation Runtime SDM requests may impact system
- CVE-2024-10210Path traversal in APROL Web Portal
- CVE-2024-45484Enabled ICMP redirection in B&R APROL
- CVE-2024-45483Missing GRUB password in B&R APROL
- CVE-2024-45482Privilege escalation in B&R APROL
- CVE-2024-45481Improper authentication in SSH of B&R APROL
- CVE-2024-45480Unauthorized local file reading in B&R APROL
- CVE-2024-10209Incorrect Permission Assignment in APROL file system
- CVE-2024-10208Cross Site Scripting vulnerability in APROL Web Portal
- CVE-2024-10207Server-Side Request Forgery (authenticated) in APROL Web Portal
- CVE-2024-10206Server-Side Request Forgery (unauthenticated) in APROL Web Portal
- CVE-2024-8315Improper Handling of Insufficient Permissions or Privileges in B&R APROL
- CVE-2024-8314Improper session handling in B&R APROL
- CVE-2024-8313Default or Guessable SNMP community names in B&R APROL
- CVE-2024-8603A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6
- CVE-2024-10490Authentication bypass flaw in several mapp components
- CVE-2024-5624Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL
- CVE-2024-5623Untrusted search path vulnerability in B&R APROL
- CVE-2024-5622Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL
- CVE-2024-5801IP Forwarding enabled in B&R Automation Runtime