B&r Industrial Automation Gmbh
19 CVEs across 10 B&r Industrial Automation Gmbh products. Browse B&r Industrial Automation Gmbh vulnerabilities, severities, and proof-of-concept exploits.
B&r Industrial Automation Gmbh products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6901 | High | 7.7 | 2026-07-06 | Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5. |
CVE-2026-6900 | High | 7.4 | 2026-07-06 | Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5. |
CVE-2025-11482 | High | 7.5 | 2026-05-26 | An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by… |
CVE-2026-0936 | Medium | 5.0 | 2026-01-29 | An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to g… |
CVE-2025-11044 | Medium | 6.8 | 2026-01-19 | An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to… |
CVE-2025-11043 | High | 7.4 | 2026-01-19 | An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an una… |
CVE-2025-11498 | Medium | 6.1 | 2025-10-14 | An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before… |
CVE-2025-3449 | Medium | 4.2 | 2025-10-07 | A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticate… |
CVE-2025-3448 | Medium | 6.1 | 2025-10-07 | Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a rem… |
CVE-2024-10210 | | 2025-03-25 | An External Control of File Name or Path vulnerability in the APROL Web Portal used in B&R APROL <4.4-005P may allow an authenticated network-based attacker to… | |
CVE-2024-8314 | | 2025-03-25 | An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in the session handling used in B&R APROL… | |
CVE-2024-8313 | | 2025-03-25 | An Exposure of Sensitive System Information to an Unauthorized Control Sphere and Initialization of a Resource with an Insecure Default vulnerability in the SN… | |
CVE-2024-45484 | | 2025-03-25 | An Allocation of Resources Without Limits or Throttling vulnerability in the operating system network configuration used in B&R APROL <4.4-00P5 may allow an un… | |
CVE-2024-45483 | | 2025-03-25 | A Missing Authentication for Critical Function vulnerability in the GRUB configuration used B&R APROL <4.4-01 may allow an unauthenticated physical attacker to… | |
CVE-2024-10209 | | 2025-03-25 | An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL <4.4-01 may allow an authenticated local attacker t… | |
CVE-2024-10208 | | 2025-03-25 | An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated net… | |
CVE-2024-10207 | | 2025-03-25 | A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to force the… | |
CVE-2024-10206 | | 2025-03-25 | A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to force th… | |
CVE-2024-10490 | | 2024-12-02 | An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R ma… |