critical9.4
CVE-2019-19108
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthent…
Impact
An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Br-Automation | Automation Runtime | from 3.08 through 3.10 from 4.00 through 4.03 from 4.04 through 4.63 Versions 2.96, 3.00, 3.01 |
| Br-Automation | Automation Studio | from 4.0.0 through 4.6.4 Versions 2.7, 3.0.71, 3.0.80, 3.0.81, 3.0.90 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.br-automation.com/en/downloads/012020-automation-runtime-snmp-authentication-weakness/
- https://www.us-cert.gov/ics/advisories/icsa-20-051-01
- https://www.br-automation.com/en/downloads/012020-automation-runtime-snmp-authentication-weakness/
- https://www.us-cert.gov/ics/advisories/icsa-20-051-01