← CVE Intelligence

CVE-2020-24681

Automation Studio and PVI Multiple incorrect permission assignments for services PUBLISHED

Description (CNA)

Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affects Automation Studio: from 4.6.0 through 4.6.X, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9.0 before 4.9.4 SP.

Affected (CNA)

Vendor / productVersions
B&R Industrial Automation / Automation Studioaffected 4.6.0 through 4.6.x; affected 4.7.0 before 4.7.7 SP; affected 4.8.0 before 4.8.6 SP; affected 4.9.0 before 4.9.4 SP
B&R Industrial Automation / NET/PVIaffected 4.6.0 through 4.6.x; affected 4.7.0 before 4.7.7; affected 4.8.0 before 4.8.6; affected 4.9.0 before 4.9.4

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.