CVE-2021-22280

Improper DLL loading algorithms in B Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

EUVD-2020-3982

Malware in sbrugna...

EUVD-2019-8737

Malware in sbrugna...

EUVD-2019-8739

Malware in sbrugna...

EUVD-2019-8738

Malware in sbrugna...

EUVD-2024-16119

Malicious code in bioql PyPI...

EUVD-2024-16019

Malicious code in bioql PyPI...

EUVD-2024-46949

Malicious code in bioql PyPI...

EUVD-2021-9427

Malicious code in bioql PyPI...

EUVD-2021-9435

Malicious code in bioql PyPI...

EUVD-2021-9421

Malicious code in bioql PyPI...

EUVD-2024-46948

Malicious code in bioql PyPI...

EUVD-2022-51642

Malicious code in bioql PyPI...

EUVD-2021-9426

Malicious code in bioql PyPI...

EUVD-2023-58286

Malicious code in bioql PyPI...

EUVD-2024-49645

Malicious code in bioql PyPI...

B&R Automation Runtime Use of a Cryptographic Primitive with a Risky Implementation (CVE-2024-0323)

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network- based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients. This plugin only...

B&R Automation Studio and Automation Runtime Improper Authorization (CVE-2019-19108)

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP. This plugin only works with Tenable.ot. Please visit...

B&R Automation Runtime Missing Release of Memory after Effective Lifetime (CVE-2020-11637)

A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition. This plugin only works with Tenable.ot. Please visit...