Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

B&R Industrial Automation — Vulnerabilities & Security Advisories 29

Browse all 29 CVE security advisories affecting B&R Industrial Automation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

B&R Industrial Automation specializes in industrial automation technology, providing hardware and software solutions for machine building and factory automation. The company’s product portfolio, which includes programmable logic controllers and drive systems, has been associated with 29 recorded Common Vulnerabilities and Exposures (CVEs). Historically, these security flaws predominantly involve remote code execution and buffer overflow vulnerabilities, often stemming from insufficient input validation in network-facing services. While specific high-profile breaches are not widely publicized, the concentration of critical severity ratings indicates systemic weaknesses in legacy protocol implementations and default configuration settings. These issues pose significant risks to operational technology environments, potentially allowing unauthorized control over industrial processes. The profile suggests a need for rigorous patch management and network segmentation to mitigate the impact of these persistent software defects within critical infrastructure deployments.

CVE ID Title CVSS Severity Published
CVE-2025-3450 Automation Runtime SDM requests may impact system — Automation Runtime CWE-413 10.0 Critical 2025-10-07
CVE-2024-45482 Privilege escalation in B&R APROL — B&R APROL CWE-829 7.8AI High AI 2025-03-25
CVE-2024-45481 Improper authentication in SSH of B&R APROL — B&R APROL CWE-791 7.8AI High AI 2025-03-25
CVE-2024-45480 Unauthorized local file reading in B&R APROL — B&R APROL CWE-94 9.1AI Critical AI 2025-03-25
CVE-2024-8315 Improper Handling of Insufficient Permissions or Privileges in B&R APROL — B&R APROL CWE-280 5.5AI Medium AI 2025-03-25
CVE-2024-8603 B&R Automation Runtime 加密问题漏洞 — Automation Runtime CWE-327 7.5 High 2025-01-15
CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL — B&R APROL CWE-79 6.1AI Medium AI 2024-08-29
CVE-2024-5623 Untrusted search path vulnerability in B&R APROL — B&R APROL CWE-250 7.3AI High AI 2024-08-29
CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL — B&R APROL CWE-250 7.8AI High AI 2024-08-29
CVE-2024-5801 IP Forwarding enabled in B&R Automation Runtime — Automation Runtime CWE-1188 7.5AI High AI 2024-08-10
CVE-2024-5800 Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime — Automation Runtime CWE-326 7.5AI High AI 2024-08-10
CVE-2021-22280 DLL Hijacking Vulnerability in Automation Studio — Automation Studio 7.2 High 2024-05-14
CVE-2024-2637 Insecure Loading of Code in B&R Products — Scene Viewer CWE-427 7.2 High 2024-05-14
CVE-2024-0220 B&R products use insufficient communication encryption — Automation Studio CWE-1240 8.3 High 2024-02-22
CVE-2023-6028 SDM Web interface vulnerable to XSS — Automation Runtime CWE-79 6.1 Medium 2024-02-05
CVE-2024-0323 FTP uses unsecure encryption mechanisms — Automation Runtime CWE-1240 9.8 Critical 2024-02-05
CVE-2021-22281 Zip Slip Vulnerability in B&R Automation Studio Project Import — Automation Studio CWE-23 6.3 Medium 2024-02-02
CVE-2020-24682 Automation Studio and PVI Multiple unquoted service path vulnerabilities — Automation Studio CWE-428 7.2 High 2024-02-02
CVE-2020-24681 Automation Studio and PVI Multiple incorrect permission assignments for services — Automation Studio CWE-732 8.2 High 2024-02-02
CVE-2021-22282 RCE in B&R Automation Studio with crafted project files — Automation Studio CWE-94 8.3 High 2024-02-02
CVE-2023-3242 B&R Industrial Automation GmbH Runtime 安全漏洞 — B&R Automation Runtime CWE-770 8.6 High 2023-07-26
CVE-2023-1617 Improper Authentication Mechanism in B&R VC4 Visualization — B&R VC4 CWE-287 9.8 Critical 2023-04-14
CVE-2022-4286 Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime — B&R Automation Runtime CWE-79 6.1 Medium 2023-02-14
CVE-2022-43765 DoS in APROLs Tbase server — B&R APROL CWE-252 7.5 High 2023-02-08
CVE-2022-43764 Buffer overflow when changing configuration on Tbase Server — B&R APROL CWE-121 9.8 Critical 2023-02-08
CVE-2022-43763 Lack of checking preconditions in APROL — B&R APROL CWE-252 7.5 High 2023-02-08
CVE-2022-43762 Memory leak when receiving messages in APROL Tbase server — B&R APROL CWE-119 7.5 High 2023-02-08
CVE-2022-43761 Lack of authentication when managing APROL database — B&R APROL CWE-306 9.4 Critical 2023-02-08
CVE-2021-22289 RCE through Project Upload from Target — Automation Studio CWE-20 8.3 High 2022-08-11

This page lists every published CVE security advisory associated with B&R Industrial Automation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.