Br-automation Automation Runtime — known CVE vulnerabilities

Every CVE whose affected-product data names Br-automation Automation Runtime, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2024-0323 — CVSS 9.8 (critical): The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An…
• CVE-2019-19108 — CVSS 9.4 (critical): An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and…
• CVE-2023-3242 — CVSS 8.6 (high): Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated…
• CVE-2021-22275 — CVSS 8.6 (high): Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic…
• CVE-2024-5800 — CVSS 7.5 (high): Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versions before 6.0.2, allowing a…
• CVE-2022-4286 — CVSS 6.1 (medium): A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and…
• CVE-2023-6028 — CVSS 6.1 (medium): A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime…
• CVE-2020-11637 — CVSS 5.8 (medium): A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow…