{"id":"CVE-2024-2637","state":"PUBLISHED","title":"Insecure Loading of Code in B&R Products","description":"An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R Industrial Automation VC4, B&R Industrial Automation APROL, B&R Industrial Automation CAN Driver, B&R Industrial Automation CAN Driver CC770, B&R Industrial Automation CAN Driver SJA1000, B&R Industrial Automation Tou0ch Lock, B&R Industrial Automation B&R Single-Touch Driver, B&R Industrial Automation Serial User Mode Touch Driver, B&R Industrial Automation Windows Settings Changer (LTSC), B&R Industrial Automation Windows Settings Changer (2019 LTSC), B&R Industrial Automation Windows 10 Recovery Solution, B&R Industrial Automation ADI driver universal, B&R Industrial Automation ADI Development Kit, B&R Industrial Automation ADI .NET SDK, B&R Industrial Automation SRAM driver, B&R Industrial Automation HMI Service Center, B&R Industrial Automation HMI Service Center Maintenance, B&R Industrial Automation Windows 10 IoT Enterprise 2019 LTSC, B&R Industrial Automation KCF Editor could allow an authenticated local attacker to execute malicious code by placing specially crafted files in the loading search path..This issue affects Scene Viewer: before 4.4.0; Automation Runtime: before J4.93; mapp Vision: before 5.26.1; mapp View: before 5.24.2; mapp Cockpit: before 5.24.2; mapp Safety: before 5.24.2; VC4: before 4.73.2; APROL: before 4.4-01; CAN Driver: before 1.1.0; CAN Driver CC770: before 3.3.0; CAN Driver SJA1000: before 1.3.0; Tou0ch Lock: before 2.1.0; B&R Single-Touch Driver: before 2.0.0; Serial User Mode Touch Driver: before 1.7.1; Windows Settings Changer (LTSC): before 3.2.0; Windows Settings Changer (2019 LTSC): before 2.2.0; Windows 10 Recovery Solution: before 3.2.0; ADI driver universal: before 3.2.0; ADI Development Kit: before 5.5.0; ADI .NET SDK: before 4.1.0; SRAM driver: before 1.2.0; HMI Service Center: before 3.1.0; HMI Service Center Maintenance: before 2.1.0; Windows 10 IoT Enterprise 2019 LTSC: through 1.1; KCF Editor: before 1.1.0.","publishedAt":"2024-05-14T18:49:28.624Z","updatedAt":"2025-04-24T06:52:46.092Z","severity":{"score":7.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","source":"ABB"},"assigner":"ABB","products":["B&R Industrial Automation Scene Viewer","B&R Industrial Automation Automation Runtime","B&R Industrial Automation mapp Vision","B&R Industrial Automation mapp View","B&R Industrial Automation mapp Cockpit","B&R Industrial Automation mapp Safety","B&R Industrial Automation VC4","B&R Industrial Automation APROL","B&R Industrial Automation CAN Driver","B&R Industrial Automation CAN Driver CC770","B&R Industrial Automation CAN Driver SJA1000","B&R Industrial Automation Tou0ch Lock","B&R Industrial Automation B&R Single-Touch Driver","B&R Industrial Automation Serial User Mode Touch Driver","B&R Industrial Automation Windows Settings Changer (LTSC)","B&R Industrial Automation Windows Settings Changer (2019 LTSC)","B&R Industrial Automation Windows 10 Recovery Solution","B&R Industrial Automation ADI driver universal","B&R Industrial Automation ADI Development Kit","B&R Industrial Automation ADI .NET SDK","B&R Industrial Automation SRAM driver","B&R Industrial Automation HMI Service Center","B&R Industrial Automation HMI Service Center Maintenance","B&R Industrial Automation Windows 10 IoT Enterprise 2019 LTSC","B&R Industrial Automation KCF Editor"],"affected":[{"vendor":"B&R Industrial Automation","product":"Scene Viewer","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.4.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Automation Runtime","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"J4.93","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp Vision","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.26.1","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp View","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp Cockpit","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp Safety","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"VC4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.73.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"APROL","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.4-01","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"CAN Driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"CAN Driver CC770","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.3.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"CAN Driver SJA1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.3.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Tou0ch Lock","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"B&R Single-Touch Driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.0.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Serial User Mode Touch Driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.7.1","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows Settings Changer (LTSC)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows Settings Changer (2019 LTSC)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows 10 Recovery Solution","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"ADI driver universal","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"ADI Development Kit","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.5.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"ADI .NET SDK","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"SRAM driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"HMI Service Center","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"HMI Service Center Maintenance","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows 10 IoT Enterprise 2019 LTSC","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.1","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"KCF Editor","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.1.0","versionType":"custom"}]}],"references":["https://www.br-automation.com/fileadmin/SA24P005_Insecure_Loading_of_Code-c7d9e49c.pdf"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/2xxx/CVE-2024-2637.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-2637","state":"PUBLISHED","datePublished":"2024-05-14T18:49:28.624Z","dateUpdated":"2025-04-24T06:52:46.092Z","assignerShortName":"ABB","assignerOrgId":"2b718523-d88f-4f37-9bbd-300c20644bf9","dateReserved":"2024-03-19T08:15:24.368Z"},"containers":{"cna":{"title":"Insecure Loading of Code in B&R Products","descriptions":[{"lang":"en","value":"An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R Industrial Automation VC4, B&R Industrial Automation APROL, B&R Industrial Automation CAN Driver, B&R Industrial Automation CAN Driver CC770, B&R Industrial Automation CAN Driver SJA1000, B&R Industrial Automation Tou0ch Lock, B&R Industrial Automation B&R Single-Touch Driver, B&R Industrial Automation Serial User Mode Touch Driver, B&R Industrial Automation Windows Settings Changer (LTSC), B&R Industrial Automation Windows Settings Changer (2019 LTSC), B&R Industrial Automation Windows 10 Recovery Solution, B&R Industrial Automation ADI driver universal, B&R Industrial Automation ADI Development Kit, B&R Industrial Automation ADI .NET SDK, B&R Industrial Automation SRAM driver, B&R Industrial Automation HMI Service Center, B&R Industrial Automation HMI Service Center Maintenance, B&R Industrial Automation Windows 10 IoT Enterprise 2019 LTSC, B&R Industrial Automation KCF Editor could allow an authenticated local attacker to execute malicious code by placing specially crafted files in the loading search path..This issue affects Scene Viewer: before 4.4.0; Automation Runtime: before J4.93; mapp Vision: before 5.26.1; mapp View: before 5.24.2; mapp Cockpit: before 5.24.2; mapp Safety: before 5.24.2; VC4: before 4.73.2; APROL: before 4.4-01; CAN Driver: before 1.1.0; CAN Driver CC770: before 3.3.0; CAN Driver SJA1000: before 1.3.0; Tou0ch Lock: before 2.1.0; B&R Single-Touch Driver: before 2.0.0; Serial User Mode Touch Driver: before 1.7.1; Windows Settings Changer (LTSC): before 3.2.0; Windows Settings Changer (2019 LTSC): before 2.2.0; Windows 10 Recovery Solution: before 3.2.0; ADI driver universal: before 3.2.0; ADI Development Kit: before 5.5.0; ADI .NET SDK: before 4.1.0; SRAM driver: before 1.2.0; HMI Service Center: before 3.1.0; HMI Service Center Maintenance: before 2.1.0; Windows 10 IoT Enterprise 2019 LTSC: through 1.1; KCF Editor: before 1.1.0."}],"affected":[{"vendor":"B&R Industrial Automation","product":"Scene Viewer","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.4.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Automation Runtime","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"J4.93","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp Vision","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.26.1","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp View","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp Cockpit","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"mapp Safety","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"VC4","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.73.2","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"APROL","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.4-01","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"CAN Driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"CAN Driver CC770","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.3.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"CAN Driver SJA1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.3.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Tou0ch Lock","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"B&R Single-Touch Driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.0.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Serial User Mode Touch Driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.7.1","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows Settings Changer (LTSC)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows Settings Changer (2019 LTSC)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows 10 Recovery Solution","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"ADI driver universal","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"ADI Development Kit","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.5.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"ADI .NET SDK","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"4.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"SRAM driver","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.2.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"HMI Service Center","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"HMI Service Center Maintenance","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.1.0","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"Windows 10 IoT Enterprise 2019 LTSC","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.1","versionType":"custom"}]},{"vendor":"B&R Industrial Automation","product":"KCF Editor","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.1.0","versionType":"custom"}]}],"references":[{"url":"https://www.br-automation.com/fileadmin/SA24P005_Insecure_Loading_of_Code-c7d9e49c.pdf"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"CWE-427 Uncontrolled Search Path Element","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ABB","orgId":"2b718523-d88f-4f37-9bbd-300c20644bf9","dateUpdated":"2025-04-24T06:52:46.092Z"},"datePublic":"2025-04-02T18:50:00.000Z","impacts":[{"capecId":"CAPEC-641","descriptions":[{"lang":"en","value":"CAPEC-641 DLL Side-Loading"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"br-automation","product":"scene_viewer","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"4.4.0","versionType":"custom"}],"cpes":["cpe:2.3:a:br-automation:scene_viewer:*:*:*:*:*:*:*:*"]},{"vendor":"br-automation","product":"automation_runtime","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"j4.93","versionType":"custom"}],"cpes":["cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:*"]},{"vendor":"br-automation","product":"mapp_vision","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"5.26.1","versionType":"custom"}],"cpes":["cpe:2.3:a:br-automation:mapp_vision:*:*:*:*:*:*:*:*"]},{"vendor":"br-automation","product":"mapp_view","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}],"cpes":["cpe:2.3:a:br-automation:mapp_view:*:*:*:*:*:*:*:*"]},{"vendor":"br-automation","product":"mapp_cockpit","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"5.24.2","versionType":"custom"}],"cpes":["cpe:2.3:a:br-automation:mapp_cockpit:*:*:*:*:*:*:*:*"]},{"vendor":"br-automation","product":"vc4","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"4.73.2","versionType":"custom"}],"cpes":["cpe:2.3:a:br-automation:vc4:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-05-14T19:33:12.195778Z","id":"CVE-2024-2637","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-06T14:56:12.677Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.br-automation.com/fileadmin/SA24P005_Insecure_Loading_of_Code-c7d9e49c.pdf","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T19:18:48.124Z"}}]}}}