CVE-2020-11646: Insertion of Sensitive Information into Log File

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

PT-2020-12746

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description The issue allows authenticated users to generate fake audit log messages,...

PT-2020-12747

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description A denial of service issue allows authenticated users to limit the availability o...

PT-2020-12745

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description An information disclosure issue allows authenticated users to view information o...

CVE-2020-11644: Improper Output Neutralization for Logs

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

PT-2020-12748

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description A log information disclosure issue allows authenticated users to view log...

B&R Automation SiteManager and GateManager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: B&R Industrial Automation GmbH Equipment: SiteManager and GateManager Vulnerabilities: Path Traversal, Uncontrolled Resource Consumption, Information Exposure, Improper Authentication, Information...

CVE-2020-14510

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

CVE-2020-14500

Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data...

CVE-2020-14508

GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-service condition...

CVE-2020-14510

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

CVE-2020-14512

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

CVE-2020-14500

Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data...

CVE-2020-14512

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

Code injection

Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data...

Hardcoded credentials

GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root...

Race condition

GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-service condition...

Design/Logic Flaw

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

CVE-2020-14512 USE OF PASSWORD HASH WITH INSUFFICIENT COMPUTATIONAL EFFORT CWE-916

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

CVE-2020-14512

CVE-2020-14512 affects Secomea GateManager (versions prior to 9.2c) due to use of a weak password hash, potentially allowing an attacker to view user passwords. Affected firmware patches exist (GateManager 9.2c/9.2i); apply the latest update to mitigate. CISA ICS advisory confirms the vulnerabili...