br-automation automation studio 4.7.2 vulnerabilities and exploits

(subscribe to this query)

9.4

CVSSv3

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.

Br-automation Automation Runtime 2.96 Br-automation Automation Runtime 3.00 Br-automation Automation Runtime 3.01 Br-automation Automation Runtime 3.06 Br-automation Automation Runtime 3.07 Br-automation Automation Runtime Br-automation Automation Runtime 4.72 Br-automation Automation Studio 2.7 Br-automation Automation Studio 3.0.71 Br-automation Automation Studio 3.0.80 Br-automation Automation Studio 3.0.81 Br-automation Automation Studio 3.0.90 Br-automation Automation Studio Br-automation Automation Studio 4.7.2

7.1

CVSSv3

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.

Br-automation Automation Studio Br-automation Automation Studio 4.8

5.9

CVSSv3

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks v...

Br-automation Automation Studio

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook