Vulnerabilities > BR Automation > Automation Studio > High

DATE CVE VULNERABILITY TITLE RISK
2024-02-02 CVE-2020-24682 Unquoted Search Path or Element vulnerability in Br-Automation Automation Studio
Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP; NET/PVI: from 4.0 through 4.6, from 4.7.0 before 4.7.7, from 4.8.0 before 4.8.6, from 4.9.0 before 4.9.4.
local
low complexity
br-automation CWE-428
7.8
2024-02-02 CVE-2021-22281 Path Traversal vulnerability in Br-Automation Automation Studio
: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12.
network
low complexity
br-automation CWE-22
7.5
2024-02-02 CVE-2020-24681 Incorrect Permission Assignment for Critical Resource vulnerability in Br-Automation Automation Studio
Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation Studio: from 4.6.0 through 4.6.X, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP.
local
low complexity
br-automation CWE-732
8.8
2024-02-02 CVE-2021-22282 Code Injection vulnerability in Br-Automation Automation Studio
Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12.
local
low complexity
br-automation CWE-94
7.8
2020-04-20 CVE-2019-19108 Use of Hard-coded Credentials vulnerability in Br-Automation Automation Runtime and Automation Studio
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.
network
low complexity
br-automation CWE-798
7.5