Skip to content
OpenAdvisories

Vendor

B&R

12 known vulnerabilities.

Products

GateManager 4 Automation Studio 3 SiteManager 2 Automation Runtime 2 Automation Runtime webserver 1 mapp View 0 APROL 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2021-22275

    Denial of service vulnerability on Automation Runtime webserver

    Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.

    B&R Automation Runtime webserver
  • High 7.7
    CVE-2020-11642

    SiteManager Denial of Service via Local File Inclusion Vulnerability

    The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances.

    B&R SiteManager
  • High 7.7
    CVE-2020-11641

    SiteManager Local File Inclusion Vulnerability

    A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances.

    B&R SiteManager
  • High 7.5
    CVE-2019-19100

    Privilege escalation via B&R Automation Studio upgrade service

    A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.

    B&R Automation Studio