| Package | Affected versions | Patched versions |
|---|---|---|
| automation studio | < 4.6 | 4.6 |
| technology guarding | < 1.4.0 | 1.4.0 |
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free