CVE-2020-11637

CVE-2020-11637 describes a memory leak in the TFTP service of B&R Automation Runtime, affecting versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63,

CVE-2020-11646 GateManager Log Information Disclosure Vulnerability

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

CVE-2020-11646

CVE-2020-11646 is a log information disclosure vulnerability in B&R GateManager and related SiteManager components. An authenticated user can view information about logs and devices belonging to their own or a foreign domain, exposing sensitive data. Affected versions include GateManager 4260 and...

CVE-2020-11645 GateManager Denial of Service Vulnerability

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

CVE-2020-11645

CVE-2020-11645 is a DoS vulnerability affecting B&R GateManager 4260/9250 (versions prior to 9.0.20262) and GateManager 8250 (prior to 9.2.620236042). An authenticated user can limit the availability of GateManager instances. The issue is documented in multiple sources (NVD/NVD-variants, CISA ICS...

CVE-2020-11642

CVE-2020-11642 affects B&R SiteManager (all versions

CVE-2020-11642 SiteManager Denial of Service via Local File Inclusion Vulnerability

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11641 SiteManager Local File Inclusion Vulnerability

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

CVE-2020-11641

CVE-2020-11641 is a path traversal vulnerability affecting B&R SiteManager (all versions before v9.2.620236042) and GateManager (before v9.0.20262 for 4260/9250, and before v9.2.620236042 for 8250). The authenticated attacker can read sensitive files from SiteManager instances, leveraging imprope...

CVE-2020-11644 GateManager Audit Message Spoofing Vulnerability

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

CVE-2020-11644

CVE-2020-11644 affects B&R GateManager 4260/9250 (pre-9.0.20262 and pre-9.2.620236042 respectively) and GateManager 8250 (pre-9.2.620236042). The vulnerability arises from improper authentication that allows an authenticated attacker to generate fake audit log messages, enabling information expos...

CVE-2020-11643

CVE-2020-11643 is a validated information-disclosure vulnerability in B&R GateManager 4260/9250 (<9.0.20262) and GateManager 8250 (

CVE-2020-11643: Insertion of Sensitive Information into Log File

An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains...

CVE-2020-11645: Uncontrolled Resource Consumption

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

PT-2020-12745

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description An information disclosure issue allows authenticated users to view information o...

CVE-2020-11641: Files or Directories Accessible to External Parties

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

PT-2020-12747

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description A denial of service issue allows authenticated users to limit the availability o...

PT-2020-12746

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description The issue allows authenticated users to generate fake audit log messages,...

CVE-2020-11646: Insertion of Sensitive Information into Log File

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

CVE-2020-11642: Files or Directories Accessible to External Parties

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...