HIGH🇵🇱 Wersja polska

CVE-2021-22282

CVSS 8.3v3.1pub. 2024-02-02upd. 2024-11-21

Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

  • Br Automation Automation Studio

    APP
    Br-Automation
    4.0 – 4.12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-19108CRITICAL9.4PL ✓same product

Słabe uwierzytelnianie SNMP w B&R Automation Runtime umożliwia modyfikację konfiguracji

CVE-2021-22280HIGH7.2same product

Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated l...

CVE-2024-0220HIGH8.3same product

B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communicat...

CVE-2020-24681HIGH8.2same product

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation St...

CVE-2020-24682HIGH7.2same product

Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial A...