B&r Industrial Automation vulnerabilities
49 CVEs and advisories name B&r Industrial Automation as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-5800Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime
- CVE-2021-22280DLL Hijacking Vulnerability in Automation Studio
- CVE-2024-2637Insecure Loading of Code in B&R Products
- CVE-2024-0220B&R products use insufficient communication encryption
- CVE-2023-6028SDM Web interface vulnerable to XSS
- CVE-2024-0323FTP uses unsecure encryption mechanisms
- CVE-2021-22281Zip Slip Vulnerability in B&R Automation Studio Project Import
- CVE-2020-24682Automation Studio and PVI Multiple unquoted service path vulnerabilities
- CVE-2020-24681Automation Studio and PVI Multiple incorrect permission assignments for services
- CVE-2021-22282RCE in B&R Automation Studio with crafted project files
- CVE-2023-3242Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated netw
- CVE-2023-1617Improper Authentication Mechanism in B&R VC4 Visualization
- CVE-2022-4286Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime
- CVE-2022-43765DoS in APROLs Tbase server
- CVE-2022-43764Buffer overflow when changing configuration on Tbase Server
- CVE-2022-43763Lack of checking preconditions in APROL
- CVE-2022-43762Memory leak when receiving messages in APROL Tbase server
- CVE-2022-43761Lack of authentication when managing APROL database
- CVE-2021-22289RCE through Project Upload from Target