Summary
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory.
An attacker who successfully exploited this vulnerability could cause the product to stop.
Vulnerabilities 1
-
Critical 10.0
Automation Runtime SDM requests may impact system
An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions.
Revision history
-
#2
Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.
-
#1
Initial version.
References
-
B&R Advisory Link
https://www.br-automation.com/fileadmin/SA25P002-f6a69e61.pdf