mapp Services Use of Weak Authenticators in mapp Audit
An update is available that resolves a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could gain access to the OPC UA server component on affected devices due to insufficient entropy of authenticators used by mapp Audit.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-79679US | — | — | ||
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services.
This issue affects mapp Audit used in mapp Services: before 6.8.0. | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationB&R Industrial Automation GmbH mapp Audit installed with mapp Services <6.8.0
The exposure is limited to systems that actively use the mapp Audit functionality. Projects that only include mapp Services, but do not configure or use mapp Audit, are not affected. The risk can be further reduced by restricting network access to the affected OPC UA server, for example by limiting access to trusted engineering stations, runtime components, or dedicated automation network segments using the Automation Runtime host-based firewall. Refer to section “General security recommendations” for further advise on how to keep your system secure.
- FixedB&R Industrial Automation GmbH mapp Audit installed with mapp Services <6.8.0
The problem is corrected in the following product versions: mapp Services >= 6.8.0 B&R recommends that customers apply the update at earliest convenience when the vulnerable functionality mapp Audit is used. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan