CVSS: 7.2EPSS: 0%CPEs: 6EXPL: 0CVE-2024-2637 – Insecure Loading of Code in B&R Products
https://notcve.org/view.php?id=CVE-2024-2637
14 May 2024 — An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R Industrial Automation VC4 could allow an authenticated local attacker to execute malicious code by placing specially crafted files in the loading search path.This issue affects Scene Viewer: before 4.4.0; Automatio... • https://www.br-automation.com/fileadmin/SA24P005_Insecure_Loading_of_Code-c7d9e49c.pdf • CWE-427: Uncontrolled Search Path Element •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0CVE-2023-1617 – Improper Authentication Mechanism in B&R VC4 Visualization
https://notcve.org/view.php?id=CVE-2023-1617
14 Apr 2023 — Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules). This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on the functionality provided in the visualization. This issue affects B&R VC4: from 3.* through 3.96.7, from 4.0* through 4.06.7, from 4.1* through 4.16.3, from 4.2* through 4.26.8, from 4.3* through 4.34.6, from 4.4*... • https://www.br-automation.com/downloads_br_productcatalogue/assets/1681046878970-en-original-1.0.pdf • CWE-287: Improper Authentication •