B&r Industrial Automation Automation Runtime
7 CVEs affecting B&r Industrial Automation Automation Runtime. Latest disclosed: 2025-10-07. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3450 | Critical | 10.0 | 2025-10-07 | An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated net… |
CVE-2024-0323 | Critical | 9.8 | 2024-02-05 | The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exp… |
CVE-2024-8603 | High | 7.5 | 2025-01-15 | A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp Vie… |
CVE-2024-5800 | High | 7.5 | 2024-08-12 | Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versions before 6.0.2, allowing a network attacker to… |
CVE-2024-2637 | High | 7.2 | 2024-05-14 | An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Autom… |
CVE-2023-6028 | Medium | 6.1 | 2024-02-05 | A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that e… |
CVE-2024-5801 | | 2024-08-12 | Enabled IP Forwarding feature in B&R Automation Runtime versions before 6.0.2 may allow remote attack-ers to compromise network security by routing IP-based pa… |