Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2022-4286

Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime

Description

A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

B&R Industrial Automation B&R Automation Runtime

Default version status: unaffected

  • >=3.00 to ≤ C4.93affected

References