Read the docs

B&R Industrial Automation

Records69All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high34CVSS 7.0–8.9

Exploited now

B&R Industrial Automation records in CISA KEV

No B&R Industrial Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Industrial Automation Aprol 16 records MEDIUM Automation Studio 10 records MEDIUM Automation Runtime 8 records MEDIUM Gatemanager 4260 Firmware 4 records LOW Gatemanager 8250 Firmware 4 records LOW Gatemanager 9250 Firmware 4 records LOW Sitemanager 2 records LOW Automation Net/pvi 1 record LOW

Records

4 records in Gatemanager 9250 Firmware · all components

TI-2020-09344 CVE-2020-11645 · GHSA-vr8r-f4qq-mrwq

GateManager Denial of Service Vulnerability

Priority LOW 32

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit availability of GateManager instances.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01346 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-400
TI-2020-09343 CVE-2020-11644 · GHSA-whcf-97gv-r7vw

GateManager Audit Message Spoofing Vulnerability

Priority LOW 31

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to generate fake audit log messages.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01198 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-117
TI-2020-09342 CVE-2020-11643 · GHSA-g53h-w976-f4q2

GateManager Information Disclosure Vulnerability

Priority LOW 31

An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices belonging to foreign dom…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01285 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-532
TI-2020-09345 CVE-2020-11646 · GHSA-pxxx-p822-7v7m

GateManager Log Information Disclosure Vulnerability

Priority LOW 22

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view log information reserved for other users.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01011 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-532
Open these records in search →