| Package | Affected versions | Patched versions |
|---|---|---|
| automation studio | ≥ 4.0, ≤ 4.0.29.87≥ 4.1, ≤ 4.1.17.113≥ 4.2, ≤ 4.2.14.119≥ 4.3, < 4.3.11≥ 4.4, < 4.4.9≥ 4.5, < 4.5.5≥ 4.6, < 4.6.4≥ 4.7, < 4.7.2 | 4.3.114.4.94.5.54.6.44.7.2 |
A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free