Lucene search
ABBCVELIST:CVE-2024-2637HistoryMay 14, 2024 - 6:49 p.m.
CVE-2024-2637 Insecure Loading of Code in B&R Products
2024-05-1418:49:28
CWE-427
ABB
raw.githubusercontent.com
4
insecure loading of code
b&r products
authenticated local attacker
arbitrary code
scene viewer
automation runtime
mapp vision
mapp view
mapp cockpit
mapp safety
vc4
0.0004 Low
EPSS
Percentile
8.7%
An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R Industrial Automation VC4 could allow an authenticated local attacker to execute malicious code by placing specially crafted files in the loading search path.This issue affects Scene Viewer: before 4.4.0; Automation Runtime: before J4.93; mapp Vision: before 5.26.1; mapp View: before 5.24.2; mapp Cockpit: before 5.24.2; mapp Safety: before 5.24.2; VC4: before 4.73.2.
