← Back

CVE-2020-24682

nvd nist
Published: Feb 2, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP; NET/PVI: from 4.0 through 4.6, from 4.7.0 before 4.7.7, from 4.8.0 before 4.8.6, from 4.9.0 before 4.9.4.

Affected (6)

Br Automation
2 products
Automation Studio
Automation Net/pvi
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Br Automation
Automation Studio
Before 4.7.7.74
Automation Studio
From 4.8 to 4.8.6.30
Automation Studio
From 4.9 to 4.9.4.92
Configuration B
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Br Automation
Automation Net/pvi
From 4.0 to 4.7.7
Automation Net/pvi
From 4.8 to 4.8.6
Automation Net/pvi
From 4.9 to 4.9.4
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-428
Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (2)

Source: cybersecurity@ch.abb.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.