PatchTheCVEbr-automation vulnerabilities
Recent CVEs affecting br-automation products. 10 tracked.
br-automation has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2024-08-29. Highest priority: CVE-2021-22282 (score 38/100).
- CVE-2024-5800 HIGH 7.5 UPGRADE Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versi
- CVE-2024-5624 MEDIUM 6.1 UPGRADE Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a netwo
- CVE-2024-5623 HIGH 7.8 UPGRADE An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attack
- CVE-2024-5622 HIGH 7.8 UPGRADE An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.
- CVE-2024-0220 HIGH 8.3 UPGRADE UPGRADE B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communicat
- CVE-2021-22282 HIGH 8.3 UPGRADE Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automatio
- CVE-2021-22281 MEDIUM 6.3 UPGRADE : Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Tr
- CVE-2021-22280 HIGH 7.2 UPGRADE Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated l
- CVE-2020-24682 HIGH 7.2 UPGRADE UPGRADE Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial A
- CVE-2020-24681 HIGH 8.2 UPGRADE Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation St
FAQ
How do I fix br-automation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is br-automation being exploited right now?
None of the tracked br-automation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which br-automation CVE should I patch first?
CVE-2021-22282 currently ranks highest (38/100): Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automatio.