Read the docs
TI-2019-13784 Aliases CVE-2019-19101GHSA-xfj2-8v99-wp6x

Incomplete communication encryption and validation in B&R Automation Studio upgrade service

Priority LOW 29CWE-326Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Information disclosure, Spoofing
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-326 and CWE-295.

Summary

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server.

Why it matters now

EPSS 0.00528 44th percentileScored 2026-11-07
Fix Fixed Automation Studio (B&R): 4.3.11SP, 4.4.9SP, 4.5.5SP +2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
B&R Industrial AutomationAutomation Studio4.0.x; 4.1.x; 4.2.x; before 4.3.11SP; before 4.4.9SP; before 4.5.5SP; before 4.6.3SP; before 4.7.24.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.3SP, 4.7.2Patch availableCNA
  • Automation Studio VendorB&R Industrial Automation Affected 4.0.x; 4.1.x; 4.2.x; before 4.3.11SP; before 4.4.9SP; before 4.5.5SP; before 4.6.3SP; before 4.7.2 Fixed in 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.3SP, 4.7.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*4.0 – 4.0.29.87; 4.1 – 4.1.17.113; 4.2 – 4.2.14.119; 4.3 to before 4.3.11; 4.4 to before 4.4.9; 4.5 to before 4.5.5; 4.6 to before 4.6.4; 4.7 to before 4.7.2VulnerableB&R Industrial Automation
  • cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:* Versions 4.0 – 4.0.29.87; 4.1 – 4.1.17.113; 4.2 – 4.2.14.119; 4.3 to before 4.3.11; 4.4 to before 4.4.9; 4.5 to before 4.5.5; 4.6 to before 4.6.4; 4.7 to before 4.7.2 Vulnerable ·B&R Industrial Automation

Remediation

  • Fix · CNA Automation Studio (B&R) Fixed in 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.3SP, 4.7.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-19101
  2. 2026-10-03 Alias added: GHSA-xfj2-8v99-wp6x

References

Advisory 1

  • TI-2019-13790 B&R Automation Runtime SNMP Authentication and Authorization Weakness CVSS 3.1CRITICAL 9.4
  • TI-2020-15148 Automation Studio and PVI Multiple incorrect permission assignments for services CVSS 3.1HIGH 8.8
  • TI-2024-00198 B&R products use insufficient communication encryption CVSS 3.1HIGH 8.3
  • TI-2021-05260 RCE in B&R Automation Studio with crafted project files CVSS 3.1HIGH 8.3
  • TI-2020-15149 Automation Studio and PVI Multiple unquoted service path vulnerabilities CVSS 3.1HIGH 7.8
  • TI-2019-13785 Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service CVSS 3.1HIGH 7.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences