Design/Logic Flaw

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.4 and 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server...

Directory traversal

A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip...

Privilege escalation

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.4SP, . 4.6.3SP, 4.7.2 and 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface...

CVE-2019-19100

The CVE-2019-19100 vulnerability affects B&R Automation Studio upgrade service and enables a local privilege escalation: authenticated users can delete arbitrary files via an exposed interface in Automation Studio versions 4.0.x, 4.1.x, 4.2.x and older builds prior to 4.3.11SP, 4.4.9SP, 4.5.4SP, ...

CVE-2019-19100 Privilege escalation via B&R Automation Studio upgrade service

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.4SP, . 4.6.3SP, 4.7.2 and 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface...

CVE-2019-19102

CVE-2019-19102 is a directory traversal (zip slip) vulnerability in SharpZipLib used by the upgrade service of B&R Automation Studio, affecting 4.0.x–4.2.x. It allows unauthenticated writers to create/overwrite files in local directories. CVSSv3.1 base score 7.5 (I:H) per NVD; base 5.5–5.0 in oth...

CVE-2019-19102 Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service

A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip...

CVE-2019-19101

CVE-2019-19101 concerns a TLS validation flaw in the B&R Automation Studio upgrade service that allows unauthenticated users to perform MITM attacks via the upgrade server. Affected products: Automation Studio versions 4.0.x, 4.1.x, 4.2.x, and older builds prior to 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6...

CVE-2019-19101 Incomplete communication encryption and validation in B&R Automation Studio upgrade service

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.4 and 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server...

PT-2020-10044

Name of the Vulnerable Software and Affected Versions B&R Automation Studio versions 4.0.x through 4.7.2, except for versions 4.3.11SP and later, 4.4.9SP and later, 4.5.5SP and later, and 4.6.4 and later, and 4.7.2 and later. This can be simplified to: B&R Automation Studio versions prior to...

CVE-2019-19100: Undefined Security Weakness

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.4SP, . 4.6.3SP, 4.7.2 and 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface...

PT-2020-10043

Name of the Vulnerable Software and Affected Versions B&R Automation Studio versions 4.0.x through 4.8.0 Description A privilege escalation issue in the upgrade service allows authenticated users to delete arbitrary files via an exposed interface. Recommendations For versions 4.0.x through 4.8.0,...

CVE-2019-19101: Inadequate Encryption Strength

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.4 and 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server...

PT-2020-10045

Name of the Vulnerable Software and Affected Versions B&R Automation Studio versions 4.0.x through 4.2.x Description A directory traversal issue in SharpZipLib, used by the upgrade service, allows unauthenticated users to write to specific local directories. This issue is also referred to as zip...

CVE-2019-19102: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip...

CVE-2017-18759

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104...

CVE-2019-19108

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

Authentication flaw

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

CVE-2019-19108

CVE-2019-19108 describes an authentication weakness in the SNMP service affecting B&R Automation Runtime (and Automation Studio) versions 2.96, 3.00, 3.01, 3.06–3.10, 4.00–4.63, 4.72 and above. The vulnerability allows unauthenticated users to modify device configuration via SNMP, with CVSS v3 ba...

CVE-2019-19108 B&R Automation Runtime SNMP Authentication and Authorization Weakness

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...