PatchTheCVEautomation studio vulnerabilities and fixes
Recent CVEs affecting automation studio, with upgrade or downgrade steps. 6 tracked.
Also searched as: automationstudio.
automation studio has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-05-14. Highest priority: CVE-2021-22282 (score 38/100).
- CVE-2024-0220 HIGH 8.3 UPGRADE UPGRADE B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communicat
- CVE-2021-22282 HIGH 8.3 UPGRADE Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automatio
- CVE-2021-22281 MEDIUM 6.3 UPGRADE : Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Tr
- CVE-2021-22280 HIGH 7.2 UPGRADE Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated l
- CVE-2020-24682 HIGH 7.2 UPGRADE UPGRADE Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial A
- CVE-2020-24681 HIGH 8.2 UPGRADE Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation St
FAQ
How do I fix automation studio vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is automation studio being exploited right now?
None of the tracked automation studio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which automation studio CVE should I patch first?
CVE-2021-22282 currently ranks highest (38/100): Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automatio.