Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: B&R Industrial Automation Component: Gatemanager 8250 Firmware Clear all filters
TI-2020-09345 CVE-2020-11646 · GHSA-pxxx-p822-7v7m

GateManager Log Information Disclosure Vulnerability

Priority LOW 22

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view log information reserved for other users.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01011 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-532
TI-2020-09344 CVE-2020-11645 · GHSA-vr8r-f4qq-mrwq

GateManager Denial of Service Vulnerability

Priority LOW 32

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to limit availability of GateManager instances.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01346 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-400
TI-2020-09343 CVE-2020-11644 · GHSA-whcf-97gv-r7vw

GateManager Audit Message Spoofing Vulnerability

Priority LOW 31

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to generate fake audit log messages.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01198 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-117
TI-2020-09342 CVE-2020-11643 · GHSA-g53h-w976-f4q2

GateManager Information Disclosure Vulnerability

Priority LOW 31

An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices belonging to foreign dom…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01285 Published 2020-10-15 Fixed in 9.0.20262, 9.2.620236042 CWE-532