Product
br automation studio
10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2021-22280
CVE-2024-0220
CVE-2021-22281
CVE-2020-24682
CVE-2021-22282
CVE-2020-24681
CVE-2019-19102
CVE-2019-19101
CVE-2019-19100
CVE-2019-19108
>= 4.0 and < 4.12
Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to exe
< 4.6
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade a
>= 4.0 and <= 4.12
: Relative Path Traversal vulnerability in B&R Industrial Automation Studio allows Relative Path Traversal.This issue a
< 4.7.7.74
Unquoted Search Path or Element vulnerability in B&R Industrial Automation Studio, B&R Industrial Automation NET/PVI al
>= 4.0 and <= 4.12
Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Studio allows Loca
>= 4.0 and < 4.7.7.74
Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Studio allows Privileg
>= 4.0 and <= 4.0.32.15
A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and
>= 4.0 and <= 4.0.29.87
A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio version
>= 4.0 and <= 4.0.29.87
A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4
>= 4.0.0 and <= 4.6.4
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.