B&R Industrial Automation Automation Studio 4
view advisory published 2022-08-16
An attacker could leverage this vulnerability to execute code within the context of the affected system, which may threaten the integrity and confidentiality of data or cause a denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-22289US | critical9.8 | — | ||
Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-228-05 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationAutomation Studio 4
Configure password protection when using the “Backing up project source files on the target system” feature. Use strong passwords.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan