CVE-2021-22280

Improper DLL loading algorithms in B Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

EUVD-2019-8739

Malware in sbrugna...

EUVD-2019-8738

Malware in sbrugna...

EUVD-2020-3982

Malware in sbrugna...

EUVD-2019-8737

Malware in sbrugna...

EUVD-2023-58286

Malicious code in bioql PyPI...

EUVD-2024-16119

Malicious code in bioql PyPI...

EUVD-2024-49645

Malicious code in bioql PyPI...

EUVD-2021-9426

Malicious code in bioql PyPI...

EUVD-2024-46948

Malicious code in bioql PyPI...

EUVD-2021-9435

Malicious code in bioql PyPI...

EUVD-2024-16019

Malicious code in bioql PyPI...

EUVD-2021-9427

Malicious code in bioql PyPI...

EUVD-2022-51642

Malicious code in bioql PyPI...

EUVD-2021-9421

Malicious code in bioql PyPI...

EUVD-2024-46949

Malicious code in bioql PyPI...

B&R Automation Studio and Automation Runtime Improper Authorization (CVE-2019-19108)

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP. This plugin only works with Tenable.ot. Please visit...

BRAutomation Runtime Buffer Copy without Checking Size of Input (CVE-2021-22275)

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

B&R Automation Runtime Missing Release of Memory after Effective Lifetime (CVE-2020-11637)

A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition. This plugin only works with Tenable.ot. Please visit...