Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2020-11637

Automation Runtime TFTP Service DoS Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

B&R Automation Runtime

  • unspecified to ≤ 4.1xaffected
  • 4.2x to < N4.26affected
  • 4.3x to < N4.34affected
  • 4.4x to < F4.45affected
  • 4.5x to < E4.53affected
  • 4.6x to < D4.63affected
  • 4.7x to < A4.73affected

References