CVE-2019-19108

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:br-automation:automation_runtime:2.96:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:3.00:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:3.01:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:3.06:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:3.07:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_runtime:4.72:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_studio:2.7:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_studio:3.0.71:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_studio:3.0.80:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_studio:3.0.81:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_studio:3.0.90:*:*:*:*:*:*:*
cpe:2.3:a:br-automation:automation_studio:4.7.2:*:*:*:*:*:*:*

Information

Published : 2020-04-20 15:15

Updated : 2020-04-29 16:07


NVD link : CVE-2019-19108

Mitre link : CVE-2019-19108


JSON object : View

CWE
CWE-798

Use of Hard-coded Credentials

Advertisement

dedicated server usa

Products Affected

br-automation

  • automation_runtime
  • automation_studio