CVE-2024-0323

The FTP server running within B&R Automation Runtime accepts connections using protocols considered obsolete and vulnerable: SSLv3, TLSv1.0, and TLSv1.1. These protocols contain known cryptographic weaknesses that allow an attacker on the same network to force negotiation of weaker encryption (downgrade attack) or directly decrypt transmitted data. No authorization or user interaction is required — network access to the device is sufficient.

An attacker can conduct a man-in-the-middle attack, intercept sensitive data transmitted between the client and FTP server (including authentication and configuration data), and compromise the integrity and confidentiality of communication with the industrial device.

Apply patches available from the manufacturer according to references (Security Advisory SA23P004 available on the B&R Automation website). It is also recommended to configure the network environment so that access to the FTP server is restricted only to trusted hosts, and to consider disabling FTP in favor of more secure file transfer protocols.

B&R Automation Runtime — versions indicated in the manufacturer's references (Security Advisory SA23P004)