CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-6028 – SDM Web interface vulnerable to XSS
https://notcve.org/view.php?id=CVE-2023-6028
A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session. Existe una vulnerabilidad de cross-site scripting (XSS) reflejada en la versión SVG de System Diagnostics Manager de B&R Automation Runtime versiones <= G4.93 que permite a un atacante remoto ejecutar código JavaScript arbitrario en el contexto de la sesión del navegador del usuario atacado. • https://www.br-automation.com/fileadmin/SA23P018_SDM_Web_interface_vulnerable_to_XSS-1d75bee8.pdf • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-0323 – FTP uses unsecure encryption mechanisms
https://notcve.org/view.php?id=CVE-2024-0323
The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients. Uso de una vulnerabilidad de algoritmo criptográfico defectuoso o riesgoso en B&R Industrial Automation Automation Runtime (módulos SDM). El servidor FTP utilizado en B&R Automation Runtime admite mecanismos de cifrado no seguros, como SSLv3, TLSv1.0 y TLS1.1. Un atacante basado en red puede explotar las fallas para realizar ataques de intermediario o para descifrar las comunicaciones entre los clientes del producto afectado. • https://www.br-automation.com/fileadmin/SA23P004_FTP_uses_unsecure_encryption_mechanisms-f57c147c.pdf • CWE-327: Use of a Broken or Risky Cryptographic Algorithm CWE-1240: Use of a Cryptographic Primitive with a Risky Implementation •
CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 0CVE-2023-3242
https://notcve.org/view.php?id=CVE-2023-3242
Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions. • https://www.br-automation.com/downloads_br_productcatalogue/assets/1689787619746-en-original-1.0.pdf • CWE-665: Improper Initialization CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2022-4286 – Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime
https://notcve.org/view.php?id=CVE-2022-4286
A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session. B&R Systems Diagnostics Manager versions above or equal to 3.00 and below or equal to C4.93 suffer from a cross site scripting vulnerability. • https://www.br-automation.com/downloads_br_productcatalogue/assets/1675607299099-en-original-1.0.pdf • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 0CVE-2021-22275 – Denial of service vulnerability on Automation Runtime webserver
https://notcve.org/view.php?id=CVE-2021-22275
Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service. Una vulnerabilidad de desbordamiento del búfer en el servidor web de B&R Automation Runtime permite a un atacante no autenticado basado en la red detener el programa cíclico en el dispositivo y causar una denegación de servicio • https://www.br-automation.com/downloads_br_productcatalogue/assets/1625405588264-en-original-1.0.pdf • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •