Skip to content
OpenAdvisories
Critical ICSA-20-051-01 1 CVE

ICSA-20-051-01_B&R Automation Studio and Automation Runtime

Published Feb 20, 2020 · Updated Feb 20, 2020

Vendor: B&R Industrial Automation Product: Automation Runtime Product: Automation Studio

Summary

Yehuda Anikster and Amir Preminger of Claroty reported this vulnerability to CISA.

Vulnerabilities 1

  • Critical 9.4
    CVE-2019-19108

    B&R Automation Runtime SNMP Authentication and Authorization Weakness

    An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.

    B&R Automation Runtime

Revision history

  1. #1

    ICSA-20-051-01 B&R Automation Automation Studio and Automation Runtime

References