What is CVE-2019-19101?

CVE-2019-19101 is a medium-severity vulnerability in B&r Automation Studio, classified under Inadequate Encryption Strength. CVSS score: 6.5/10. Published 2020-04-29.

How severe is CVE-2019-19101?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in B&r Automation Studio

CVE-2019-19101

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to…

EPSS: 0.005 (39.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

B&r Automation Studio — versions 4.0.x, 4.1.x, 4.2.x
Br-automation Automation_studio

Weakness classification (CWE)

References

cybersecurity@ch.abb.com (x_refsource_CONFIRM, Broken Link, Vendor Advisory)

Frequently asked questions

What is CVE-2019-19101?: CVE-2019-19101 is a medium-severity vulnerability in B&r Automation Studio, classified under Inadequate Encryption Strength. CVSS score: 6.5/10. Published 2020-04-29.
How severe is CVE-2019-19101?: Medium severity. CVSS v3 base score is 6.5 out of 10.