Vulnerabilities in B&R

11 results

Vexday analysis

B&R apresenta 11 vulnerabilidades catalogadas, com apenas 1 crítica e nenhuma sob exploração ativa conhecida. A fraqueza predominante (CWE-532 - Exposição de Informações Sensíveis em Log) sugere falhas de tratamento de dados, mas a ausência de atividade ofensiva e de publicações recentes indica risco moderado no curto prazo.

CVE-2019-19108CRITICALB&R Automation Runtime SNMP Authentication and Authorization WeaknessEPSS 1.6%CVE-2020-11645MEDIUMGateManager Denial of Service VulnerabilityEPSS 1.3%CVE-2020-11642HIGHSiteManager Denial of Service via Local File Inclusion VulnerabilityEPSS 1.3%CVE-2020-11643MEDIUMGateManager Information Disclosure VulnerabilityEPSS 1.3%CVE-2019-19102MEDIUMZip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade serviceEPSS 1.2%CVE-2020-11641HIGHSiteManager Local File Inclusion VulnerabilityEPSS 1.2%CVE-2020-11644MEDIUMGateManager Audit Message Spoofing VulnerabilityEPSS 1.2%CVE-2020-11637MEDIUMAutomation Runtime TFTP Service DoS VulnerabilityEPSS 1.1%CVE-2020-11646MEDIUMGateManager Log Information Disclosure VulnerabilityEPSS 1.0%CVE-2019-19101MEDIUMIncomplete communication encryption and validation in B&R Automation Studio upgrade serviceEPSS 0.5%CVE-2019-19100HIGHPrivilege escalation via B&R Automation Studio upgrade serviceEPSS 0.3%