Advisories · Technology

B&R Industrial Automation Automation Studio.

Every CVE that names B&R Industrial Automation Automation Studio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-22280 CVE record

CVSS 7.2 High

DLL Hijacking Vulnerability in Automation Studio
- B&R Industrial Automation Automation Studio
- CWE-20
Not analysed yet 14 May 2024
CVE-2024-0220 CVE record

CVSS 8.3 High

B&R products use insufficient communication encryption
- B&R Industrial Automation Automation Studio
- B&R Industrial Automation Technology Guarding
- Code injection
- Weak cryptography or TLS
Not analysed yet 22 Feb 2024
CVE-2021-22281 CVE record

CVSS 6.3 Medium

Zip Slip Vulnerability in B&R Automation Studio Project Import
- B&R Industrial Automation Automation Studio
- Path traversal
Not analysed yet 2 Feb 2024
CVE-2020-24682 CVE record

CVSS 7.2 High

Automation Studio and PVI Multiple unquoted service path vulnerabilities
- B&R Industrial Automation Automation Studio
- B&R Industrial Automation NET/PVI
- CWE-428
Not analysed yet 2 Feb 2024
CVE-2020-24681 CVE record

CVSS 8.2 High

Automation Studio and PVI Multiple incorrect permission assignments for services
- B&R Industrial Automation Automation Studio
- B&R Industrial Automation NET/PVI
- Broken access control
Not analysed yet 2 Feb 2024
CVE-2021-22282 CVE record

CVSS 8.3 High

RCE in B&R Automation Studio with crafted project files
- B&R Industrial Automation Automation Studio
- Code injection
Not analysed yet 2 Feb 2024
CVE-2021-22289 CVE record

CVSS 8.3 High

RCE through Project Upload from Target
- B&R Industrial Automation Automation Studio
- CWE-20
Not analysed yet 11 Aug 2022