Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP; NET/PVI: from 4.0 through 4.6, from 4.7.0 before 4.7.7, from 4.8.0 before 4.8.6, from 4.9.0 before 4.9.4.
References
| Link | Resource |
|---|---|
| https://www.br-automation.com/fileadmin/2021-14-BR-AS-NET-PVI-Service-Issues-c3710fbf.pdf | Vendor Advisory |
| https://www.br-automation.com/fileadmin/2021-14-BR-AS-NET-PVI-Service-Issues-c3710fbf.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
History
21 Nov 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.br-automation.com/fileadmin/2021-14-BR-AS-NET-PVI-Service-Issues-c3710fbf.pdf - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
10 Feb 2024, 01:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Br-automation automation Net\/pvi
Br-automation automation Studio Microsoft windows Microsoft Br-automation |
|
| CPE | cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:br-automation:automation_net\/pvi:*:*:*:*:*:*:*:* |
|
| References | () https://www.br-automation.com/fileadmin/2021-14-BR-AS-NET-PVI-Service-Issues-c3710fbf.pdf - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
02 Feb 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP; NET/PVI: from 4.0 through 4.6, from 4.7.0 before 4.7.7, from 4.8.0 before 4.8.6, from 4.9.0 before 4.9.4. |
02 Feb 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-02 08:15
Updated : 2024-11-21 05:15
NVD link : CVE-2020-24682
Mitre link : CVE-2020-24682
CVE.ORG link : CVE-2020-24682
JSON object : View
Products Affected
microsoft
- windows
br-automation
- automation_net\/pvi
- automation_studio
CWE
CWE-428
Unquoted Search Path or Element