Login Request a demo
BR
Vendor
Br-automation
15 products with CVEs on record
58
CVEs
0
On KEV
0
New 30D
Products
IA
Industrial Automation Aprol
Br-automation
9.8
16 CVEs0 on KEV0 new
AS
Automation Studio
Br-automation
9.4
10 CVEs0 on KEV0 new
AR
Automation Runtime
Br-automation
9.8
9 CVEs0 on KEV0 new
G4
Gatemanager 4260 Firmware
Br-automation
6.5
4 CVEs0 on KEV0 new
G8
Gatemanager 8250 Firmware
Br-automation
6.5
4 CVEs0 on KEV0 new
G9
Gatemanager 9250 Firmware
Br-automation
6.5
4 CVEs0 on KEV0 new
SI
Sitemanager
Br-automation
6.5
2 CVEs0 on KEV0 new
VC
Vc4
Br-automation
9.8
2 CVEs0 on KEV0 new
AN
Automation Net/pvi
Br-automation
7.8
1 CVEs0 on KEV0 new
MC
Mapp Cockpit
Br-automation
7.2
1 CVEs0 on KEV0 new
MV
Mapp View
Br-automation
7.2
1 CVEs0 on KEV0 new
MV
Mapp Vision
Br-automation
7.2
1 CVEs0 on KEV0 new
SV
Scene Viewer
Br-automation
7.2
1 CVEs0 on KEV0 new
ST
Studio
Br-automation
9.8
1 CVEs0 on KEV0 new
TG
Technology Guarding
Br-automation
8.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-5624
IA
Industrial Automation Aprol
Br-automation
6.1
0%
Aug 29Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL
CVE-2024-5623
IA
Industrial Automation Aprol
Br-automation
7.8
0%
Aug 29Untrusted search path vulnerability in B&R APROL
CVE-2024-5622
IA
Industrial Automation Aprol
Br-automation
7.8
0%
Aug 29Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL
CVE-2024-5800
AR
Automation Runtime
Br-automation
7.5
0%
Aug 10Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime
CVE-2021-22280
AS
Automation Studio
Br-automation
7.2
0%
May 14DLL Hijacking Vulnerability in Automation Studio
CVE-2024-2637
VC
Vc4
Br-automation
7.2
0%
May 14Insecure Loading of Code in B&R Products
CVE-2024-0220
TG
Technology Guarding
Br-automation
8.1
0%
Feb 22B&R products use insufficient communication encryption
CVE-2023-6028
AR
Automation Runtime
Br-automation
6.1
0%
Feb 5SDM Web interface vulnerable to XSS
CVE-2024-0323
AR
Automation Runtime
Br-automation
9.8
0%
Feb 5FTP uses unsecure encryption mechanisms
CVE-2021-22281
AS
Automation Studio
Br-automation
7.5
0%
Feb 2Zip Slip Vulnerability in B&R Automation Studio Project Import
CVE-2020-24682
AS
Automation Studio
Br-automation
7.8
0%
Feb 2Automation Studio and PVI Multiple unquoted service path vulnerabilities
CVE-2020-24681
AS
Automation Studio
Br-automation
8.8
0%
Feb 2Automation Studio and PVI Multiple incorrect permission assignments for services
CVE-2021-22282
AS
Automation Studio
Br-automation
7.8
0%
Feb 2RCE in B&R Automation Studio with crafted project files
CVE-2023-3242
AR
Automation Runtime
Br-automation
5.9
1%
Jul 26Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated network-based attackers to cause permanent…
CVE-2023-1617
VC
Vc4
Br-automation
9.8
1%
Apr 14Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may allow an unauthenticated network-based attacker to bypass…
CVE-2022-4286
AR
Automation Runtime
Br-automation
6.1
1%
Feb 14A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to…
CVE-2022-43765
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Feb 8B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application…
CVE-2022-43764
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Feb 8Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow
CVE-2022-43763
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Feb 8Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions < R 4.2-07
CVE-2022-43762
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Feb 8Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
CVE-2022-43761
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Feb 8Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system configuration
CVE-2021-22289
ST
Studio
Br-automation
9.8
1%
Aug 11Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code
CVE-2021-22275
AR
Automation Runtime
Br-automation
8.6
1%
May 13Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of…
CVE-2019-19878
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19877
IA
Industrial Automation Aprol
Br-automation
5.3
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19876
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19875
IA
Industrial Automation Aprol
Br-automation
9.8
2%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19874
IA
Industrial Automation Aprol
Br-automation
9.8
2%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19873
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19872
IA
Industrial Automation Aprol
Br-automation
9.8
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2019-19869
IA
Industrial Automation Aprol
Br-automation
7.5
1%
Nov 27An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08
CVE-2020-11637
AR
Automation Runtime
Br-automation
7.5
1%
Oct 15A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network…
CVE-2020-11646
G9
Gatemanager 9250 Firmware
Br-automation
4.3
1%
Oct 15A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view log…
CVE-2020-11645
G9
Gatemanager 9250 Firmware
Br-automation
6.5
1%
Oct 15A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit…
CVE-2020-11644
G9
Gatemanager 9250 Firmware
Br-automation
6.5
1%
Oct 15The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to…
CVE-2020-11643
G9
Gatemanager 9250 Firmware
Br-automation
6.5
1%
Oct 15An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view…
CVE-2020-11642
SI
Sitemanager
Br-automation
6.5
1%
Oct 15The local file inclusion vulnerability present in B&R SiteManager versions <9.2.620236042 allows authenticated users to impact availability of SiteManager instances
CVE-2020-11641
SI
Sitemanager
Br-automation
6.5
1%
Oct 15A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances
CVE-2019-19102
AS
Automation Studio
Br-automation
7.5
1%
Apr 29A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to…
CVE-2019-19101
AS
Automation Studio
Br-automation
5.9
1%
Apr 29A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, <…
CVE-2019-19100
AS
Automation Studio
Br-automation
7.1
0%
Apr 29A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <
CVE-2019-19108
AR
Automation Runtime
Br-automation
9.4
2%
Apr 20An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to…