Summary
An update is available that resolves a privately reported vulnerability in the product versions listed as affected in this advisory.
An attacker who successfully exploited this vulnerability may masquerade as services on affected devices.
Vulnerabilities 1
-
High 7.5
A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runt…
Revision history
-
#3
Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.
-
#2
Corrected NVD Link
-
#1
Initial version.
References
-
B&R Advisory Link
https://www.br-automation.com/fileadmin/SA25P001-c478fad6.pdf
-
Recommended practices can be found in the following documents: Defense in Depth for B&R products
https://www.br-automation.com/fileadmin/Cyber_Security_-_Defense_in_Depth_for_BR_Products-bdd37e82.pdf