high8.3
CVE-2024-0220
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers.
Impact
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Br-Automation | Automation Studio | before 4.6 |
| Br-Automation | Technology Guarding | before 1.4.0 |