CVE-2019-19100 | BDVDB-2026-135339 Detail
B&RAutomation Studio
Description#
A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-264 Permissions, Privileges, and Access Controls
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.