br-automation kayıtları
br-automation üreticisine ait 42 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 9
- Düzeltme kaydı olan
- %7,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-552 Files or Directories Accessible to External Parties2
- CWE-326 Inadequate Encryption Strength2
- CWE-532 Insertion of Sensitive Information into Log File2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
42 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
40Planlayın | CVE-2019-19874İstismar yok | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.br-automation · industrial automation aprol · CWE-77 | Kritik9,8 | %1,827 Kas 2020 |
39İzleyin | CVE-2019-19875İstismar yok | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.br-automation · industrial automation aprol · CWE-77 | Kritik9,8 | %1,527 Kas 2020 |
39İzleyin | CVE-2019-19872İstismar yok | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.br-automation · industrial automation aprol · CWE-77 | Kritik9,8 | %1,127 Kas 2020 |
39İzleyin | CVE-2019-19876İstismar yok | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.br-automation · industrial automation aprol · CWE-89 | Kritik9,8 | %1,027 Kas 2020 |
39İzleyin | CVE-2021-22289İstismar yok | RCE through Project Upload from Targetbr-automation · studio · CWE-20 | Kritik9,8 | %0,811 Ağu 2022 |
39İzleyin | CVE-2022-43764İstismar yok | Buffer overflow when changing configuration on Tbase Serverbr-automation · industrial automation aprol · CWE-121 | Kritik9,8 | %0,78 Şub 2023 |
39İzleyin | CVE-2023-1617İstismar yok | Improper Authentication Mechanism in B&R VC4 Visualizationbr-automation · vc4 · CWE-287 | Kritik9,8 | %0,714 Nis 2023 |
39İzleyin | CVE-2022-43762İstismar yok | Memory leak when receiving messages in APROL Tbase serverbr-automation · industrial automation aprol · CWE-119 | Kritik9,8 | %0,68 Şub 2023 |
39İzleyin | CVE-2024-0323İstismar yok | FTP uses unsecure encryption mechanismsbr-automation · automation runtime · CWE-1240 | Kritik9,8 | %0,25 Şub 2024 |
37İzleyin | CVE-2019-19108İstismar yok | B&R Automation Runtime SNMP Authentication and Authorization Weaknessbr-automation · automation runtime · CWE-798 | Kritik9,4 | %1,620 Nis 2020 |
35İzleyin | CVE-2020-24681İstismar yok | Automation Studio and PVI Multiple incorrect permission assignments for servicesbr-automation · automation studio · CWE-732 | Yüksek8,8 | %0,12 Şub 2024 |
34İzleyin | CVE-2021-22275İstismar yok | Denial of service vulnerability on Automation Runtime webserverbr-automation · automation runtime · CWE-120 | Yüksek8,6 | %0,913 May 2022 |
33İzleyin | CVE-2024-5800İstismar yok | Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtimebr-automation · automation runtime · CWE-326 | Yüksek8,3 | %0,212 Ağu 2024 |
32İzleyin | CVE-2024-0220İstismar yok | B&R products use insufficient communication encryptionbr-automation · automation studio · CWE-94 | Yüksek8,1 | %0,322 Şub 2024 |
31İzleyin | CVE-2021-22282İstismar yok | RCE in B&R Automation Studio with crafted project filesbr-automation · automation studio · CWE-94 | Yüksek7,8 | %0,32 Şub 2024 |
31İzleyin | CVE-2020-24682İstismar yok | Automation Studio and PVI Multiple unquoted service path vulnerabilitiesbr-automation · automation studio · CWE-428 | Yüksek7,8 | %0,12 Şub 2024 |
30İzleyin | CVE-2019-19102İstismar yok | Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade servicebr-automation · automation studio · CWE-22 | Yüksek7,5 | %1,228 Nis 2020 |
30İzleyin | CVE-2019-19873İstismar yok | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.br-automation · industrial automation aprol | Yüksek7,5 | %1,127 Kas 2020 |
30İzleyin | CVE-2019-19878İstismar yok | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.br-automation · industrial automation aprol | Yüksek7,5 | %1,127 Kas 2020 |
30İzleyin | CVE-2020-11637İstismar yok | Automation Runtime TFTP Service DoS Vulnerabilitybr-automation · automation runtime · CWE-401 | Yüksek7,5 | %1,015 Eki 2020 |
30İzleyin | CVE-2019-19869İstismar yok | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.br-automation · industrial automation aprol | Yüksek7,5 | %0,827 Kas 2020 |
30İzleyin | CVE-2022-43765İstismar yok | DoS in APROLs Tbase serverbr-automation · industrial automation aprol · CWE-252 | Yüksek7,5 | %0,68 Şub 2023 |
30İzleyin | CVE-2022-43763İstismar yok | Lack of checking preconditions in APROLbr-automation · industrial automation aprol · CWE-252 | Yüksek7,5 | %0,68 Şub 2023 |
30İzleyin | CVE-2022-43761İstismar yok | Lack of authentication when managing APROL databasebr-automation · industrial automation aprol · CWE-306 | Yüksek7,5 | %0,58 Şub 2023 |
30İzleyin | CVE-2021-22281İstismar yok | Zip Slip Vulnerability in B&R Automation Studio Project Importbr-automation · automation studio · CWE-23 | Yüksek7,5 | %0,32 Şub 2024 |
- CVE-2019-1987440Planlayın
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.
KritikCVSS 9,8İstismar yokEPSS %1br-automation · industrial automation aprol27 Kas 2020
- CVE-2019-1987539İzleyin
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.
KritikCVSS 9,8İstismar yokEPSS %1br-automation · industrial automation aprol27 Kas 2020
- CVE-2019-1987239İzleyin
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.
KritikCVSS 9,8İstismar yokEPSS %1br-automation · industrial automation aprol27 Kas 2020
- CVE-2019-1987639İzleyin
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.
KritikCVSS 9,8İstismar yokEPSS %1br-automation · industrial automation aprol27 Kas 2020
- CVE-2021-2228939İzleyin
RCE through Project Upload from Target
KritikCVSS 9,8İstismar yokEPSS %0br-automation · studio11 Ağu 2022
- CVE-2022-4376439İzleyin
Buffer overflow when changing configuration on Tbase Server
KritikCVSS 9,8İstismar yokEPSS %0br-automation · industrial automation aprol8 Şub 2023
- CVE-2023-161739İzleyin
Improper Authentication Mechanism in B&R VC4 Visualization
KritikCVSS 9,8İstismar yokEPSS %0br-automation · vc414 Nis 2023
- CVE-2022-4376239İzleyin
Memory leak when receiving messages in APROL Tbase server
KritikCVSS 9,8İstismar yokEPSS %0br-automation · industrial automation aprol8 Şub 2023
- CVE-2024-032339İzleyin
FTP uses unsecure encryption mechanisms
KritikCVSS 9,8İstismar yokEPSS %0br-automation · automation runtime5 Şub 2024
- CVE-2019-1910837İzleyin
B&R Automation Runtime SNMP Authentication and Authorization Weakness
KritikCVSS 9,4İstismar yokEPSS %1br-automation · automation runtime20 Nis 2020
- CVE-2020-2468135İzleyin
Automation Studio and PVI Multiple incorrect permission assignments for services
YüksekCVSS 8,8İstismar yokEPSS %0br-automation · automation studio2 Şub 2024
- CVE-2021-2227534İzleyin
Denial of service vulnerability on Automation Runtime webserver
YüksekCVSS 8,6İstismar yokEPSS %0br-automation · automation runtime13 May 2022
- CVE-2024-580033İzleyin
Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime
YüksekCVSS 8,3İstismar yokEPSS %0br-automation · automation runtime12 Ağu 2024
- CVE-2024-022032İzleyin
B&R products use insufficient communication encryption
YüksekCVSS 8,1İstismar yokEPSS %0br-automation · automation studio22 Şub 2024
- CVE-2021-2228231İzleyin
RCE in B&R Automation Studio with crafted project files
YüksekCVSS 7,8İstismar yokEPSS %0br-automation · automation studio2 Şub 2024
- CVE-2020-2468231İzleyin
Automation Studio and PVI Multiple unquoted service path vulnerabilities
YüksekCVSS 7,8İstismar yokEPSS %0br-automation · automation studio2 Şub 2024
- CVE-2019-1910230İzleyin
Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service
YüksekCVSS 7,5İstismar yokEPSS %1br-automation · automation studio28 Nis 2020
- CVE-2019-1987330İzleyin
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.
YüksekCVSS 7,5İstismar yokEPSS %1br-automation · industrial automation aprol27 Kas 2020
- CVE-2019-1987830İzleyin
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.
YüksekCVSS 7,5İstismar yokEPSS %1br-automation · industrial automation aprol27 Kas 2020
- CVE-2020-1163730İzleyin
Automation Runtime TFTP Service DoS Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1br-automation · automation runtime15 Eki 2020
- CVE-2019-1986930İzleyin
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08.
YüksekCVSS 7,5İstismar yokEPSS %0br-automation · industrial automation aprol27 Kas 2020
- CVE-2022-4376530İzleyin
DoS in APROLs Tbase server
YüksekCVSS 7,5İstismar yokEPSS %0br-automation · industrial automation aprol8 Şub 2023
- CVE-2022-4376330İzleyin
Lack of checking preconditions in APROL
YüksekCVSS 7,5İstismar yokEPSS %0br-automation · industrial automation aprol8 Şub 2023
- CVE-2022-4376130İzleyin
Lack of authentication when managing APROL database
YüksekCVSS 7,5İstismar yokEPSS %0br-automation · industrial automation aprol8 Şub 2023
- CVE-2021-2228130İzleyin
Zip Slip Vulnerability in B&R Automation Studio Project Import
YüksekCVSS 7,5İstismar yokEPSS %0br-automation · automation studio2 Şub 2024