CVE-2020-24681 Automation Studio and PVI Multiple incorrect permission assignments for services

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation Studio: from 4.6.0 through 4.6.X, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP...

CVE-2020-24681 Automation Studio and PVI Multiple incorrect permission assignments for services

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation Studio: from 4.6.0 through 4.6.X, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP...

CVE-2021-22282 RCE in B&R Automation Studio with crafted project files

Improper Control of Generation of Code 'Code Injection' vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12...

CVE-2021-22282

The CVE-2021-22282 issue affects B&R Industrial Automation Automation Studio versions 4.0–4.12. The root cause is an improper control of code generation stemming from an improper copy algorithm in the project extraction component, which can enable local code execution. The impact is that an unaut...

CVE-2021-22282 RCE in B&R Automation Studio with crafted project files

Improper Control of Generation of Code 'Code Injection' vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12...

CVE-2021-22281: Relative Path Traversal

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

CVE-2020-24682: Unquoted Search Path or Element

Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from...

PT-2024-10790 · B&R Industrial Automation · Automation Studio +1

Name of the Vulnerable Software and Affected Versions: B&R Industrial Automation Automation Studio versions 4.0 through 4.6, versions 4.7.0 through 4.7.6, versions 4.8.0 through 4.8.5, versions 4.9.0 through 4.9.3 B&R Industrial Automation NET/PVI versions 4.0 through 4.6, versions 4.7.0 through...

CVE-2021-22282: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12...

B&R Industrial Automation Studio Path Traversal Vulnerability

B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation, an Austrian company that develops and programs its automation solutions. A security vulnerability exists in B&R Industrial Automation Studio versions 4.0 through 4.12 that stems...

B&R Industrial Automation Studio Code Injection Vulnerability

B&R Industrial Automation Studio is a suite of integrated development environments IDEs used by B&R Industrial Automation, an Austrian company, to develop and program its automation solutions. A code injection vulnerability exists in B&R Industrial Automation Studio versions 4.0 through 4.12 that...

PT-2024-10789 · B&R Industrial Automation · Automation Studio

Name of the Vulnerable Software and Affected Versions: B&R Industrial Automation Automation Studio versions 4.6.0 through 4.6.X B&R Industrial Automation Automation Studio versions 4.7.0 through 4.7.6 B&R Industrial Automation Automation Studio versions 4.8.0 through 4.8.5 B&R Industrial Automati...

CVE-2020-24681: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation Studio: from 4.6.0 through 4.6.X, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP...

PT-2024-10876

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation Automation Studio versions 4.0 through 4.12 Description The issue is related to a Relative Path Traversal vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations F...

B&R Industrial Automation Studio Security Breach

B&R Industrial Automation GmbH B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation GmbH, Austria, for developing and programming its automation solutions. A security vulnerability exists in B&R Industrial Automation Studio version...

PT-2024-10877 · B&R Industrial Automation · Automation Studio

Name of the Vulnerable Software and Affected Versions: B&R Industrial Automation Automation Studio versions 4.0 through 4.12 Description: The issue is related to an improper control of generation of code, also known as 'Code Injection', which allows for local execution of code. This is due to an...

CVE-2022-3156

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution...

CVE-2022-3156 Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution...

CVE-2022-3156: Improper Authentication

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution...

CVE-2022-2759

Delta Electronics Delta Robot Automation Studio DRAS versions prior to 1.13.20 are affected by improper restrictions where the software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to emb...