Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-1617

Improper Authentication Mechanism in B&R VC4 Visualization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on the functionality provided in the visualization. This issue affects B&R VC4: from 3.* through 3.96.7, from 4.0* through 4.06.7, from 4.1* through 4.16.3, from 4.2* through 4.26.8, from 4.3* through 4.34.6, from 4.4* through 4.45.1, from 4.5* through 4.45.3, from 4.7* through 4.72.9.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

B&R Industrial Automation B&R VC4

Default version status: unaffected

  • 3.* to ≤ 3.96.7affected
  • 4.0* to ≤ 4.06.7affected
  • 4.1* to ≤ 4.16.3affected
  • 4.2* to ≤ 4.26.8affected
  • 4.3* to ≤ 4.34.6affected
  • 4.4* to ≤ 4.45.1affected
  • 4.5* to ≤ 4.45.3affected
  • 4.7* to ≤ 4.72.9affected

References