PT-2020-10044 · B&R · Automation Studio

Published 2020-04-29 · Updated 2021-11-03 · CVE-2019-19101

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions B&R Automation Studio versions 4.0.x through 4.7.2, except for versions 4.3.11SP and later, 4.4.9SP and later, 4.5.5SP and later, and 4.6.4 and later, and 4.7.2 and later. This can be simplified to: B&R Automation Studio versions prior to 4.3.11SP B&R Automation Studio versions prior to 4.4.9SP B&R Automation Studio versions prior to 4.5.5SP B&R Automation Studio versions prior to 4.6.4 B&R Automation Studio versions prior to 4.7.2

Description The issue is related to a missing secure communication definition and incomplete TLS validation in the upgrade service. This enables unauthenticated users to perform man-in-the-middle (MITM) attacks via the B&R upgrade server.

Recommendations For versions prior to 4.3.11SP, update to version 4.3.11SP or later. For versions prior to 4.4.9SP, update to version 4.4.9SP or later. For versions prior to 4.5.5SP, update to version 4.5.5SP or later. For versions prior to 4.6.4, update to version 4.6.4 or later. For versions prior to 4.7.2, update to version 4.7.2 or later.

Fix

Improper Certificate Validation

Inadequate Encryption Strength

Weakness Enumeration

CWE-295

CWE-326

Related Identifiers

CVE-2019-19101

Affected Products

Automation Studio

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-19101 · Security Note
• https://br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19101 · Vendor Advisory