Automation Studio — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Automation Studio, with AI-generated Chinese analysis, references, and POCs.

Vendor: B&R

CVE ID	Title	CVSS	Severity	Published
CVE-2021-22280	DLL Hijacking Vulnerability in Automation Studio	7.2	High	2024-05-14
CVE-2024-0220	B&R products use insufficient communication encryption CWE-1240	8.3	High	2024-02-22
CVE-2021-22281	Zip Slip Vulnerability in B&R Automation Studio Project Import CWE-23	6.3	Medium	2024-02-02
CVE-2020-24682	Automation Studio and PVI Multiple unquoted service path vulnerabilities CWE-428	7.2	High	2024-02-02
CVE-2020-24681	Automation Studio and PVI Multiple incorrect permission assignments for services CWE-732	8.2	High	2024-02-02
CVE-2021-22282	RCE in B&R Automation Studio with crafted project files CWE-94	8.3	High	2024-02-02
CVE-2021-22289	RCE through Project Upload from Target CWE-20	8.3	High	2022-08-11
CVE-2019-19100	Privilege escalation via B&R Automation Studio upgrade service CWE-264	7.5	High	2020-04-29
CVE-2019-19102	Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service CWE-22	5.5	Medium	2020-04-29
CVE-2019-19101	Incomplete communication encryption and validation in B&R Automation Studio upgrade service CWE-326	6.5	Medium	2020-04-29

All 10 known CVE vulnerabilities affecting Automation Studio with full Chinese analysis, references, and POCs where available.