Advisories · Technology

B&R Industrial Automation Automation Runtime.

Every CVE that names B&R Industrial Automation Automation Runtime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-3450 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Automation Runtime SDM requests may impact system
- B&R Industrial Automation Automation Runtime
- CWE-413
Not analysed yet 7 Oct 2025
CVE-2024-8603 CVE record

CVSS 8.2 High

Broken or risky cryptographic algorithm in B&R Industrial Automation Automation Runtime and others
- B&R Industrial Automation Automation Runtime
- B&R Industrial Automation mapp View
- Weak cryptography or TLS
Not analysed yet 15 Jan 2025
CVE-2024-5801 CVE record

CVSS 5.3 Medium

IP Forwarding enabled in B&R Automation Runtime
- B&R Industrial Automation Automation Runtime
- CWE-653
- CWE-1188
Not analysed yet 10 Aug 2024
CVE-2024-5800 CVE record

CVSS 8.3 High

Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime
- B&R Industrial Automation Automation Runtime
- Weak cryptography or TLS
Not analysed yet 10 Aug 2024
CVE-2024-2637 CVE record

CVSS 7.2 High

Insecure Loading of Code in B&R Products
- B&R Industrial Automation Scene Viewer
- B&R Industrial Automation Automation Runtime
- CWE-427
Not analysed yet 14 May 2024
CVE-2023-6028 CVE record

CVSS 6.1 Medium

SDM Web interface vulnerable to XSS
- B&R Industrial Automation Automation Runtime
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2024
CVE-2024-0323 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

FTP uses unsecure encryption mechanisms
- B&R Industrial Automation Automation Runtime
- CWE-1240
Not analysed yet 5 Feb 2024