Description
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| B&R Industrial Automation | Automation Studio | 4.0 – < 4.6 | 4.6 |
| B&R Industrial Automation | Technology Guarding | 1.0.0 – < 1.4.0 | 1.4.0 |