Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11

Export CSV
CVE-2025-11043

Improper Server Certificate Validation in Automation Studio

An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio Studio
CVE-2021-22280

DLL Hijacking Vulnerability in Automation Studio

Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code in the context of the product.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio
CVE-2021-22282

RCE in B&R Automation Studio with crafted project files

Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio
CVE-2020-24682

Automation Studio and PVI Multiple unquoted service path vulnerabilities

Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP; NET/PVI: from 4.0 through 4.6, from 4.7.0 before 4.7.7, from 4.8.0 before 4.8.6, from 4.9.0 before 4.9.4.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Br-automation Microsoft
Products
Automation Net\/pvi Automation Studio Windows
CVE-2020-24681

Automation Studio and PVI Multiple incorrect permission assignments for services

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation Studio: from 4.6.0 through 4.6.X, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Br-automation Microsoft
Products
Automation Studio Windows
CVE-2024-0220

B&R products use insufficient communication encryption

B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio Technology Guarding
CVE-2021-22281

Zip Slip Vulnerability in B&R Automation Studio Project Import

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio
CVE-2019-19108

B&R Automation Runtime SNMP Authentication and Authorization Weakness

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.

CVSS 3.1 · 9.4 Critical EPSS 1.6% KEV · Not listed
Vendors
Br-automation
Products
Automation Runtime Automation Studio
CVE-2019-19102

Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service

A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio
CVE-2019-19101

Incomplete communication encryption and validation in B&R Automation Studio upgrade service

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio
CVE-2019-19100

Privilege escalation via B&R Automation Studio upgrade service

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Br-automation
Products
Automation Studio