Br Automation

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-22289 1Br Automation 1Studio Jun 17, 2026 Aug 11, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code.
CVE-2021-22275 1Br Automation 1Automation Runtime Jun 17, 2026 May 13, 2022 N/A· v4 8.6 HIGH· v3 7.8 HIGH· v2 Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.
CVE-2019-19878 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358.
CVE-2019-19877 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a di...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357.Show less
CVE-2019-19876 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006.
CVE-2019-19875 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root p...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364.Show less
CVE-2019-19874 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerab...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364.Show less
CVE-2019-19873 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CV...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983.Show less
CVE-2019-19872 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerabilit...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364.Show less
CVE-2019-19869 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed (unencrypted) by using the IosHttp service and the JSON interface.
CVE-2020-11637 1Br Automation 1Automation Runtime Jun 17, 2026 Oct 15, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS)...Show more A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.Show less
CVE-2020-11646 1Br Automation 3Gatemanager 4260 Firmware Gatemanager 8250 FirmwareGatemanager 9250 Firmware Jun 17, 2026 Oct 15, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view log information reserved for other users.
CVE-2020-11645 1Br Automation 3Gatemanager 4260 Firmware Gatemanager 8250 FirmwareGatemanager 9250 Firmware Jun 17, 2026 Oct 15, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit availability of GateManager instances.
CVE-2020-11644 1Br Automation 3Gatemanager 4260 Firmware Gatemanager 8250 FirmwareGatemanager 9250 Firmware Jun 17, 2026 Oct 15, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to generate fake audit log messages.
CVE-2020-11643 1Br Automation 3Gatemanager 4260 Firmware Gatemanager 8250 FirmwareGatemanager 9250 Firmware Jun 17, 2026 Oct 15, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices belonging to foreign dom...Show more An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains.Show less
CVE-2020-11642 1Br Automation 1Sitemanager Jun 17, 2026 Oct 15, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances.
CVE-2020-11641 1Br Automation 1Sitemanager Jun 17, 2026 Oct 15, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances.
CVE-2019-19102 1Br Automation 1Automation Studio Jun 17, 2026 Apr 29, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability...Show more A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip.Show less
CVE-2019-19101 1Br Automation 1Automation Studio Jun 17, 2026 Apr 29, 2020 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauth...Show more A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server.Show less
CVE-2019-19100 1Br Automation 1Automation Studio Jun 17, 2026 Apr 29, 2020 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arb...Show more A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.Show less

Previous 123 Next