Authentication flaw

2020-04-2022:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.

CPENameOperatorVersion
automation_runtimeeq2.96
automation_runtimeeq3.00
automation_runtimeeq3.01
automation_runtimeeq3.06
automation_runtimeeq3.07
automation_runtimege3.08
automation_runtimele3.10
automation_runtimege4.00
automation_runtimele4.03
automation_runtimege4.04

Name	Operator	Version
automation_runtime	eq	2.96
automation_runtime	eq	3.00
automation_runtime	eq	3.01
automation_runtime	eq	3.06
automation_runtime	eq	3.07
automation_runtime	ge	3.08
automation_runtime	le	3.10
automation_runtime	ge	4.00
automation_runtime	le	4.03
automation_runtime	ge	4.04