Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2019-19108

B&R Automation Runtime SNMP Authentication and Authorization Weakness

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

B&R Automation Runtime

  • 2 <= 2.96affected
  • 3 <= 3.10affected
  • 4 <= 4.72affected

References