Skip to content
OpenAdvisories
Medium · 5.8 CVE-2020-11637 EUVD-2020-3982GHSA-7j7h-vfmh-v8jc

Automation Runtime TFTP Service DoS Vulnerability

Published Oct 15, 2020 · Updated Sep 16, 2024 · Assigned by ABB

Description

A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.

Affected products

VendorProductAffectedFixed
B&R Automation Runtime unspecified – ≤ 4.1x, 4.2x – < N4.26, 4.3x – < N4.34, 4.4x – < F4.45, 4.5x – < E4.53, 4.6x – < D4.63, 4.7x – < A4.73 N4.26

References