Privilege escalation

2020-04-2903:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.

CPENameOperatorVersion
automation_studioge4.2
automation_studiole4.2.14.119
automation_studioge4.1
automation_studiole4.1.17.113
automation_studioeq4.8
automation_studioge4.7
automation_studiolt4.7.2
automation_studioge4.6
automation_studiolt4.6.3
automation_studioge4.5

Name	Operator	Version
automation_studio	ge	4.2
automation_studio	le	4.2.14.119
automation_studio	ge	4.1
automation_studio	le	4.1.17.113
automation_studio	eq	4.8
automation_studio	ge	4.7
automation_studio	lt	4.7.2
automation_studio	ge	4.6
automation_studio	lt	4.6.3
automation_studio	ge	4.5