CVE-2020-11642

CVE-2020-11642 affects B&R SiteManager (all versions

CVE-2020-11642 SiteManager Denial of Service via Local File Inclusion Vulnerability

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11641 SiteManager Local File Inclusion Vulnerability

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

CVE-2020-11641

CVE-2020-11641 is a path traversal vulnerability affecting B&R SiteManager (all versions before v9.2.620236042) and GateManager (before v9.0.20262 for 4260/9250, and before v9.2.620236042 for 8250). The authenticated attacker can read sensitive files from SiteManager instances, leveraging imprope...

CVE-2020-11644 GateManager Audit Message Spoofing Vulnerability

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

CVE-2020-11644

CVE-2020-11644 affects B&R GateManager 4260/9250 (pre-9.0.20262 and pre-9.2.620236042 respectively) and GateManager 8250 (pre-9.2.620236042). The vulnerability arises from improper authentication that allows an authenticated attacker to generate fake audit log messages, enabling information expos...

CVE-2020-11643

CVE-2020-11643 is a validated information-disclosure vulnerability in B&R GateManager 4260/9250 (<9.0.20262) and GateManager 8250 (

Broadvoice Leak Exposes 350M Records, Personal Voicemail Transcripts

UPDATE Broadvoice, a well-known VoIP provider that serves small- and medium-sized businesses, has leaked more than 350 million customer records related to the company’s “b-hive” cloud-based communications suite. The data includes hundreds of thousands of voicemail transcripts, many involving...

CVE-2020-11643: Insertion of Sensitive Information into Log File

An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains...

CVE-2020-11644: Improper Output Neutralization for Logs

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

PT-2020-12745

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description An information disclosure issue allows authenticated users to view information o...

CVE-2020-11645: Uncontrolled Resource Consumption

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

CVE-2020-11641: Files or Directories Accessible to External Parties

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

CVE-2020-11642: Files or Directories Accessible to External Parties

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

PT-2020-12744

Name of the Vulnerable Software and Affected Versions B&R SiteManager versions prior to 9.2.620236042 Description The issue allows authenticated users to impact the availability of SiteManager instances due to a local file inclusion vulnerability. Recommendations For versions prior to...

PT-2020-12747

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description A denial of service issue allows authenticated users to limit the availability o...

PT-2020-12746

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description The issue allows authenticated users to generate fake audit log messages,...

CVE-2020-11637: Missing Release of Memory after Effective Lifetime

A memory leak in the TFTP service in B&R Automation Runtime versions...

CVE-2020-11646: Insertion of Sensitive Information into Log File

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

PT-2020-12742

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions prior to N4.26 B&R Automation Runtime versions prior to N4.34 B&R Automation Runtime versions prior to F4.45 B&R Automation Runtime versions prior to E4.53 B&R Automation Runtime versions prior to D4.63 B&R...