Vulnerabilities (CVE)

Filtered by vendor Br-automation Subscribe
Filtered by product Automation Runtime
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-3242 1 Br-automation 1 Automation Runtime 2023-08-04 N/A 5.9 MEDIUM
Allocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B&R Industrial Automation B&R Automation Runtime allows Flooding, Leveraging Race Conditions.This issue affects B&R Automation Runtime: <G4.93.
CVE-2021-22275 1 Br-automation 1 Automation Runtime 2022-05-25 7.8 HIGH 8.6 HIGH
Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.
CVE-2020-11637 1 Br-automation 1 Automation Runtime 2021-09-14 5.0 MEDIUM 7.5 HIGH
A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.
CVE-2019-19108 1 Br-automation 2 Automation Runtime, Automation Studio 2020-04-29 7.5 HIGH 9.4 CRITICAL
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.