Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versions before 6.0.2, allowing a network attacker to decrypt the SSL/TLS communication.
CVSS Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XBr Automation Automation Runtime
APPBr-Automation< 6.0.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2024-0323CRITICAL9.8PL ✓ten sam produkt
B&R Automation Runtime: serwer FTP obsługuje przestarzałe protokoły szyfrowania
CVE-2019-19108CRITICAL9.4ten sam produkt
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3....
CVE-2023-3242HIGH8.6ten sam produkt
Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4....
CVE-2021-22275HIGH8.6ten sam produkt
Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based atta...
CVE-2023-6028MEDIUM6.1ten sam produkt
A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager o...