Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2021-22282

RCE in B&R Automation Studio with crafted project files

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

B&R Industrial Automation Automation Studio

Default version status: unaffected

  • 4.0 to ≤ 4.12affected

References