This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2019-19100 | BDVDB-2026-135339 Detail

B&RAutomation Studio

Description#

A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact high, availability impact high. Attack vector: local.

Weaknesses#

  • CWE-264 Permissions, Privileges, and Access Controls

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.