Lucene search

PRIOn knowledge basePRION:CVE-2023-3242

HistoryJul 26, 2023 - 6:15 p.m.

Design/Logic Flaw

2023-07-2618:15:00

PRIOn knowledge base

www.prio-n.com

design flaw logic flaw improper initialization allocation of resources flooding leveraging race conditions b&r industrial automation vulnerability

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

17.0%

JSON

Allocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B&R Industrial Automation B&R Automation Runtime allows Flooding, Leveraging Race Conditions.This issue affects B&R Automation Runtime: <G4.93.

CPENameOperatorVersion
automation_runtimeeq< g4.93

CPE	Name	Operator	Version
	automation_runtime	eq	< g4.93

References

www.br-automation.com/downloads_br_productcatalogue/assets/1689787619746-en-original-1.0.pdf

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

17.0%

JSON

Related for PRION:CVE-2023-3242