PT-2020-12742 · B&R · B&R Automation Runtime

Published 2020-10-15 · Updated 2021-09-14 · CVE-2020-11637

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions prior to N4.26 B&R Automation Runtime versions prior to N4.34 B&R Automation Runtime versions prior to F4.45 B&R Automation Runtime versions prior to E4.53 B&R Automation Runtime versions prior to D4.63 B&R Automation Runtime versions prior to A4.73

Description A memory leak in the TFTP service could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.

Recommendations For versions prior to N4.26, update to version N4.26 or later to resolve the issue. For versions prior to N4.34, update to version N4.34 or later to resolve the issue. For versions prior to F4.45, update to version F4.45 or later to resolve the issue. For versions prior to E4.53, update to version E4.53 or later to resolve the issue. For versions prior to D4.63, update to version D4.63 or later to resolve the issue. For versions prior to A4.73, update to version A4.73 or later to resolve the issue.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2020-11637

Affected Products

B&R Automation Runtime

References · 3

• https://osv.dev/vulnerability/CVE-2020-11637 · Vendor Advisory
• https://br-automation.com/downloads_br_productcatalogue/assets/1595163815396-de-original-1.0.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11637 · Security Note