CVE-2024-0323criticalCWE-1240

CVE-2024-0323: falha crítica em B&R Industrial Automation Automation Runtime

FTP uses unsecure encryption mechanisms

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Automation Runtime

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.2%
The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
B&R Industrial Automation · Automation Runtime
CVEs relacionadas — B&R Industrial Automation Automation Runtime

No mesmo produto, das mais perigosas para as menos.

CVE-2023-6028MEDIUMSDM Web interface vulnerable to XSSEPSS 0.4%CVE-2024-8603HIGHCVE-2024-8603EPSS 0.3%CVE-2025-3450CRITICALAutomation Runtime SDM requests may impact systemEPSS 0.3%CVE-2024-5800HIGHDiffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation RuntimeEPSS 0.3%CVE-2024-5801MEDIUMIP Forwarding enabled in B&R Automation RuntimeEPSS 0.3%CVE-2024-2637HIGHInsecure Loading of Code in B&R ProductsEPSS 0.2%