Skip to content
OpenAdvisories
High · 8.3 CVE-2024-5800 EUVD-2024-46948GHSA-m54w-mhp6-x65m

Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime

Published Aug 10, 2024 · Updated Aug 12, 2024 · Assigned by ABB

Description

Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versions before 6.0.2, allowing a network attacker to decrypt the SSL/TLS communication.

Affected products

VendorProductAffectedFixed
B&R Industrial Automation Automation Runtime < 6.0.0 6.0.0

References