Description (CNA)
An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attacker to create a malicious link. The user would need to click on this link, after which the resulting CSV file addi-tionally needs to be manually opened.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| B&R Industrial Automation GmbH / Automation Runtime | affected 6.0 before 6.4; affected 4 |
CWE
CWE-1236
References
ADP enrichment
No English description supplied.
No references supplied.