TI-2020-09337 Aliases CVE-2020-11637 GHSA-7j7h-vfmh-v8jc

Automation Runtime TFTP Service DoS Vulnerability

LOW 35CWE-401Published 2020-10-15 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-401.

Summary

A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.

Why it matters now

EPSS 0.01092 65th percentileScored 2026-11-07

Fix Fixed Automation Runtime (B&R): N4.26, N4.34, F4.45 +3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
B&R Industrial Automation	Automation Runtime	up to 4.1x; 4.2x to before N4.26; 4.3x to before N4.34; 4.4x to before F4.45; 4.5x to before E4.53; 4.6x to before D4.63; 4.7x to before A4.73	N4.26, N4.34, F4.45, E4.53, D4.63, A4.73	Patch available	CNA

Automation Runtime VendorB&R Industrial Automation Affected up to 4.1x; 4.2x to before N4.26; 4.3x to before N4.34; 4.4x to before F4.45; 4.5x to before E4.53; 4.6x to before D4.63; 4.7x to before A4.73 Fixed in N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:br-automation:automation_runtime::::::::	up to 4.10; 4.20 to before n4.26; 4.40 to before f4.45; 4.50 to before e4.53; 4.60 to before d4.63; 4.70 to before a4.73; 4.30 to before n4.34	Vulnerable	B&R Industrial Automation

cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:* Versions up to 4.10; 4.20 to before n4.26; 4.40 to before f4.45; 4.50 to before e4.53; 4.60 to before d4.63; 4.70 to before a4.73; 4.30 to before n4.34 Vulnerable ·B&R Industrial Automation

Remediation

Fix · CNA Automation Runtime (B&R) Fixed in N4.26, N4.34, F4.45, E4.53, D4.63, A4.73

Timeline

2026-10-02 Threatist record created from CVE-2020-11637
2026-10-03 Alias added: GHSA-7j7h-vfmh-v8jc

References

Advisory 1

https://www.br-automation.com/downloads_br_productcatalogue/assets/1595163815396-de-original-1.0.pdf

TI-2024-00297 FTP uses unsecure encryption mechanisms CVSS 3.1CRITICAL 9.8
TI-2023-03038 Resource allocation without limits in B&R Automation Runtime CVSS 3.1HIGH 8.6
TI-2019-13790 B&R Automation Runtime SNMP Authentication and Authorization Weakness CVSS 3.1CRITICAL 9.4
TI-2021-05253 Denial of service vulnerability on Automation Runtime webserver CVSS 3.1HIGH 8.6
TI-2024-05377 Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime CVSS 4.0HIGH 8.3
TI-2022-03925 Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime CVSS 3.1MEDIUM 6.1

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences