CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
46.3%
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.
Vendor | Product | Version | CPE |
---|---|---|---|
br-automation | automation_runtime | * | cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:* |
br-automation | automation_runtime | 2.96 | cpe:2.3:a:br-automation:automation_runtime:2.96:*:*:*:*:*:*:* |
br-automation | automation_runtime | 3.00 | cpe:2.3:a:br-automation:automation_runtime:3.00:*:*:*:*:*:*:* |
br-automation | automation_runtime | 3.01 | cpe:2.3:a:br-automation:automation_runtime:3.01:*:*:*:*:*:*:* |
br-automation | automation_runtime | 3.06 | cpe:2.3:a:br-automation:automation_runtime:3.06:*:*:*:*:*:*:* |
br-automation | automation_runtime | 3.07 | cpe:2.3:a:br-automation:automation_runtime:3.07:*:*:*:*:*:*:* |
br-automation | automation_runtime | 4.72 | cpe:2.3:a:br-automation:automation_runtime:4.72:*:*:*:*:*:*:* |
br-automation | automation_studio | * | cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:* |
br-automation | automation_studio | 2.7 | cpe:2.3:a:br-automation:automation_studio:2.7:*:*:*:*:*:*:* |
br-automation | automation_studio | 3.0.71 | cpe:2.3:a:br-automation:automation_studio:3.0.71:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
46.3%