CVE-2020-11641: SiteManager Local File Inclusion Vulnerability

Reference Links

• https://us-cert.cisa.gov/ics/advisories/icsa-20-273-03
• https://www.br-automation.com/downloads_br_productcatalogue/assets/1600003183751-de-original-1.0.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-20-273-03 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-20-273-03

Frequently Asked Questions

• What is the severity of CVE-2020-11641?

  CVE-2020-11641 is classified as a medium-severity vulnerability due to its potential for exposing sensitive files.

• How do I fix CVE-2020-11641?

  To mitigate CVE-2020-11641, upgrade B&R SiteManager to version 9.2.620236042 or later.

• Who is affected by CVE-2020-11641?

  CVE-2020-11641 affects all versions of B&R SiteManager prior to 9.2.620236042, as well as older versions of GateManager 4260 and 9250, and GateManager 8250.

• What type of vulnerability is CVE-2020-11641?

  CVE-2020-11641 is a local file inclusion vulnerability that allows authenticated users access to sensitive files.

• Can CVE-2020-11641 be exploited remotely?

  CVE-2020-11641 cannot be exploited remotely as it requires authenticated user access to the affected system.