Summary
An update is available that resolves a vulnerability in the product versions listed as affected in the advisory.
An attacker who successfully exploits this vulnerability could gain access to the OPC UA server component on affected devices due to insufficient entropy of authenticators used by mapp Audit.
Vulnerabilities 1
-
High 8.7
Use of Weak Credentials
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0.
Revision history
-
#1
Initial version.
References
-
B&R CYBERSECURITY ADVISORY - PDF Version
https://br-cws-assets.de-fra-1.linodeobjects.com/SA26P012-28f0e5aa.pdf
-
Defense in Depth for B&R products
https://www.br-automation.com/fileadmin/Cyber_Security_-_Defense_in_Depth_for_BR_Products-bdd37e82.pdf