Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
B&R products use insufficient communication encryption
Vulnerability Description
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
CWE-1240
Vulnerability Title
B&R Industrial Automation Studio 安全漏洞
Vulnerability Description
B&R Industrial Automation Studio是奥地利贝加莱工业自动化（B&R Industrial Automation）公司的一套集成开发环境（IDE），用于开发和编程其自动化解决方案。 B&R Industrial Automation Studio 4.6之前版本、BR Technology Guarding 1.4.0之前版本存在安全漏洞，该漏洞源于使用的加密技术不足以与升级和许可服务器进行通信。攻击者利用该漏洞可以在产品上执行任意代码或嗅探敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A