Latest br-automation automation studio Vulnerabilities

● CVE-2021-22281

Zip Slip Vulnerability in B&R Automation Studio Project Import

Br-automation Automation Studio>=4.0<=4.12

● CVE-2020-24682

Automation Studio and PVI Multiple unquoted service path vulnerabilities

Br-automation Automation Studio<4.7.7.74

Br-automation Automation Studio>=4.8<4.8.6.30

Br-automation Automation Studio>=4.9<4.9.4.92

Microsoft Windows

Br-automation Automation Net\/pvi>=4.0<4.7.7

Br-automation Automation Net\/pvi>=4.8<4.8.6

and 2 more

● CVE-2020-24681

Automation Studio and PVI Multiple incorrect permission assignments for services

Br-automation Automation Studio>=4.0<4.7.7.74

Br-automation Automation Studio>=4.8<4.8.6.30

Br-automation Automation Studio>=4.9<4.9.4.92

Microsoft Windows

● CVE-2021-22282

RCE in B&R Automation Studio with crafted project files

Br-automation Automation Studio>=4.0<=4.12

● CVE-2019-19101

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and <...

Br-automation Automation Studio>=4.0<=4.0.29.87

Br-automation Automation Studio>=4.1<=4.1.17.113

Br-automation Automation Studio>=4.2<=4.2.14.119

Br-automation Automation Studio>=4.3<4.3.11

Br-automation Automation Studio>=4.4<4.4.9

Br-automation Automation Studio>=4.5<4.5.5

and 2 more

● CVE-2019-19100

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated...

Br-automation Automation Studio>=4.0<=4.0.29.87

Br-automation Automation Studio>=4.1<=4.1.17.113

Br-automation Automation Studio>=4.2<=4.2.14.119

Br-automation Automation Studio>=4.3<4.3.11

Br-automation Automation Studio>=4.4<4.4.9

Br-automation Automation Studio>=4.5<4.5.4

and 3 more

● CVE-2019-19102

A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directorie...

Br-automation Automation Studio>=4.0<=4.0.32.15

Br-automation Automation Studio>=4.1<=4.1.17.113

Br-automation Automation Studio>=4.2<=4.2.14.119

● CVE-2019-19108

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration ...

Br-automation Automation Runtime>=3.08<=3.10

Br-automation Automation Runtime>=4.00<=4.03

Br-automation Automation Runtime>=4.04<=4.63

Br-automation Automation Runtime=2.96

Br-automation Automation Runtime=3.00

Br-automation Automation Runtime=3.01

and 10 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.