Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code in the context of the product.
oryginał ENCVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:HBr Automation Automation Studio
APPBr-Automation4.0 – 4.12 (bez)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2019-19108CRITICAL9.4ten sam produkt
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3....
CVE-2024-0220HIGH8.3ten sam produkt
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communicat...
CVE-2020-24681HIGH8.2ten sam produkt
Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation St...
CVE-2020-24682HIGH7.2ten sam produkt
Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial A...
CVE-2021-22282HIGH8.3ten sam produkt
Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automatio...