CVE-2019-19108: Use of Hard-coded Credentials

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

Buffer overflow

Improper buffer restrictions in firmware for some IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0578: Undefined Security Weakness

Improper conditions check for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

PT-2020-11843

Name of the Vulnerable Software and Affected Versions IntelR Modular Server MFS2600KISPP Compute Module affected versions not specified Description The issue is related to an improper conditions check that may allow an unauthenticated user to potentially enable escalation of privilege via adjacen...

CVE-2020-0598: Untrusted Search Path

Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0576: Buffer Copy without Checking Size of Input

Buffer overflow in IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-0547: Incorrect Default Permissions

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0600: Undefined Security Weakness

Improper buffer restrictions in firmware for some IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0558: Undefined Security Weakness

Improper buffer restrictions in kernel mode driver for IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an unprivileged user to potentially enable denial of service via adjacent access...

CVE-2020-0557: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0577: Undefined Security Weakness

Insufficient control flow for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-0568: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the IntelR Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable denial of service via local access...

PT-2020-5637

Name of the Vulnerable Software and Affected Versions IntelR Binary Configuration Tool for Windows, all versions Description The issue is related to an uncontrolled search path in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-5618

Name of the Vulnerable Software and Affected Versions IntelR Data Migration Software versions 3.3 and earlier Description The issue is related to incorrect default permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-5632

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi products versions prior to 21.70 Description The issue is related to improper buffer restrictions in the kernel mode driver, which may allow an unprivileged user to potentially enable denial of service via adjacent...

PT-2020-5634

Name of the Vulnerable Software and Affected Versions IntelR Modular Server MFS2600KISPP Compute Module affected versions not specified Description The issue is related to a buffer overflow in the IntelR Modular Server MFS2600KISPP Compute Module, which may allow an unauthenticated user to...

WUSA freezes when you install an update in Windows 8.1 or Windows Server 2012 R2

WUSA freezes when you install an update in Windows 8.1 or Windows Server 2012 R2 Symptoms When you install an update that uses the Windows Update Standalone Installer WUSA in Windows 8.1 or Windows Server 2012 R2, the Wusa.exe process freezes. Resolution To resolve this issue, install the update...

Private EUDCs are not displayed in Character Map after you apply update 2982791 in Windows 7 or Windows Server 2008 R2

Private EUDCs are not displayed in Character Map after you apply update 2982791 in Windows 7 or Windows Server 2008 R2 This article describes an end-user-defined characters EUDCs load issue that occurs after you apply update 2982791 in Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1. W...

B&R Automation Automation Studio Path Traversal Vulnerability

B&R Automation Automation Studio is an automation control system. A path traversal vulnerability exists in B&R Automation Automation Studio, which can be exploited by an attacker to write to certain local directories...

B&R Automation Studio

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: B&R Automation Equipment: Automation Studio Vulnerabilities: Improper Privilege Management, Missing Required Cryptographic Step, Path Traversal 2. RISK EVALUATION Successful exploitation of these...