Description
A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| B&R Industrial Automation | B&R Automation Runtime | >=3.00 – ≤ C4.93 | — |
Advisories 2
- VDE-2023-027 AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations CERT@VDE · Aug 7, 2023
- ICSA-23-068-02 B&R Systems Diagnostics Manager CISA ICS & IT advisories · Mar 29, 2023