CRITICAL🇵🇱 Wersja polska

CVE-2019-19108

CVSS 9.4v3.1pub. 2020-04-20upd. 2024-11-21

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

  • Br Automation Automation Runtime

    APP
    Br-Automation
    2.963.003.013.063.074.723.08 – 3.104.00 – 4.034.04 – 4.63

  • Br Automation Automation Studio

    APP
    Br-Automation
    2.73.0.713.0.803.0.813.0.904.7.24.0.0 – 4.6.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-0323CRITICAL9.8PL ✓ten sam produkt

B&R Automation Runtime: serwer FTP obsługuje przestarzałe protokoły szyfrowania

CVE-2024-5800HIGH8.3ten sam produkt

Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versi...

CVE-2021-22280HIGH7.2ten sam produkt

Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated l...

CVE-2024-0220HIGH8.3ten sam produkt

B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communicat...

CVE-2020-24682HIGH7.2ten sam produkt

Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial A...