What’s Vulnerable › Products

B&R Industrial Automation Automation Runtime vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your B&R Industrial Automation Automation Runtime version is affected

Latest B&R Industrial Automation Automation Runtime vulnerabilities

• CVE-2025-3450 — Automation Runtime SDM requests may impact system (CVSS 10.0)
• CVE-2024-8603 — (CVSS 7.5)
• CVE-2024-5801 — IP Forwarding enabled in B&R Automation Runtime (CVSS 5.3)
• CVE-2024-5800 — Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime (CVSS 7.5)
• CVE-2024-2637 — Insecure Loading of Code in B&R Products (CVSS 7.2)
• CVE-2023-6028 — SDM Web interface vulnerable to XSS (CVSS 6.1)
• CVE-2024-0323 — FTP uses unsecure encryption mechanisms (CVSS 9.8)
• CVE-2023-3242 — (CVSS 5.9)
• CVE-2022-4286 — Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime (CVSS 6.1)
• CVE-2021-22275 — Denial of service vulnerability on Automation Runtime webserver (CVSS 8.6)
• CVE-2020-11637 — Automation Runtime TFTP Service DoS Vulnerability (CVSS 7.5)
• CVE-2019-19108 — B&R Automation Runtime SNMP Authentication and Authorization Weakness (CVSS 9.4)