CVE-2024-8603 — B&R Industrial Automation / Automation Runtime

CVE-2024-8603

B&R Industrial Automation / Automation Runtime PUBLISHED

Description (CNA)

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices.

Affected (CNA)

Vendor / product	Versions
B&R Industrial Automation / Automation Runtime	affected 6.0 before 6.1; affected 4.0
B&R Industrial Automation / mapp View	affected 6.0 before 6.1; affected 5.0

CWE

CWE-327

References

https://www.br-automation.com/fileadmin/SA25P001-c478fad6.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.