Automation Studio
Approved changes feed: RSS · Atom
cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Br Automation (9a6d54fa-e6bc-5bbc-b950-3afd1660c473) |
|---|---|
| Product | Automation Studio (61df6b23-654d-5c18-98f8-74fbc7f0fd84) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0220 |
vulnerable | 2026-06-08 06:22:00.038296 |
B&R products use insufficient communication encryption
HIGH (8.3)
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.
Published: 2024-02-22T10:15:44.750Z
Updated: 2024-09-19T17:24:51.723Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22282 |
vulnerable | 2026-06-08 05:30:00.106376 |
RCE in B&R Automation Studio with crafted project files
HIGH (8.3)
Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12.
Published: 2024-02-02T06:38:32.358Z
Updated: 2025-06-17T21:29:23.035Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22281 |
vulnerable | 2026-06-08 05:30:00.105818 |
Zip Slip Vulnerability in B&R Automation Studio Project Import
MEDIUM (6.3)
: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12.
Published: 2024-02-02T07:24:29.599Z
Updated: 2024-08-21T17:32:38.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22280 |
vulnerable | 2026-06-08 05:30:00.104419 |
DLL Hijacking Vulnerability in Automation Studio
HIGH (7.2)
Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code in the context of the product.
Published: 2024-05-14T19:36:51.930Z
Updated: 2024-08-03T18:37:18.537Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24682 |
vulnerable | 2026-06-08 05:22:35.332105 |
Automation Studio and PVI Multiple unquoted service path vulnerabilities
HIGH (7.2)
Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP; NET/PVI: from 4.0 through 4.6, from 4.7.0 before 4.7.7, from 4.8.0 before 4.8.6, from 4.9.0 before 4.9.4.
Published: 2024-02-02T07:11:44.086Z
Updated: 2025-06-17T21:29:22.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24681 |
vulnerable | 2026-06-08 05:22:35.331305 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19108 |
vulnerable | 2026-06-08 05:13:21.513675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19102 |
vulnerable | 2026-06-08 05:13:21.496831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19101 |
vulnerable | 2026-06-08 05:13:21.496443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19100 |
vulnerable | 2026-06-08 05:13:21.494645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.