B&R Industrial Automation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| B&R APROL | 12 | – | Mar 25, 2025 |
| Automation Runtime | 7 | – | Oct 7, 2025 |
| Automation Studio | 7 | – | May 14, 2024 |
| NET/PVI | 2 | – | Feb 2, 2024 |
| B&R Automation Runtime | 2 | – | Jul 26, 2023 |
| mapp View | 2 | – | Jan 15, 2025 |
| CAN Driver | 1 | – | May 14, 2024 |
| CAN Driver CC770 | 1 | – | May 14, 2024 |
| CAN Driver SJA1000 | 1 | – | May 14, 2024 |
| HMI Service Center | 1 | – | May 14, 2024 |
| HMI Service Center Maintenance | 1 | – | May 14, 2024 |
| KCF Editor | 1 | – | May 14, 2024 |
| mapp Cockpit | 1 | – | May 14, 2024 |
| mapp Safety | 1 | – | May 14, 2024 |
| mapp Vision | 1 | – | May 14, 2024 |
| Scene Viewer | 1 | – | May 14, 2024 |
| Serial User Mode Touch Driver | 1 | – | May 14, 2024 |
| SRAM driver | 1 | – | May 14, 2024 |
| Technology Guarding | 1 | – | Feb 22, 2024 |
| Tou0ch Lock | 1 | – | May 14, 2024 |
| VC4 | 1 | – | May 14, 2024 |
| Windows 10 IoT Enterprise 2019 LTSC | 1 | – | May 14, 2024 |
| Windows 10 Recovery Solution | 1 | – | May 14, 2024 |
| Windows Settings Changer (2019 LTSC) | 1 | – | May 14, 2024 |
| ADI Development Kit | 1 | – | May 14, 2024 |
| Windows Settings Changer (LTSC) | 1 | – | May 14, 2024 |
| ADI driver universal | 1 | – | May 14, 2024 |
| ADI .NET SDK | 1 | – | May 14, 2024 |
| APROL | 1 | – | May 14, 2024 |
| B&R Single-Touch Driver | 1 | – | May 14, 2024 |
| B&R VC4 | 1 | – | Apr 14, 2023 |
Exploited and recent CVEs
- CVE-2025-3450 Automation Runtime SDM requests may impact system 0.3%
- CVE-2024-45482 Privilege escalation in B&R APROL 0.1%
- CVE-2024-45481 Improper authentication in SSH of B&R APROL 0.1%
- CVE-2024-45480 Unauthorized local file reading in B&R APROL 0.4%
- CVE-2024-8315 Improper Handling of Insufficient Permissions or Privileges in B&R APROL 0.1%
- CVE-2024-8603 A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by un 0.3%
- CVE-2024-8603 A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by un 0.3%
- CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL 0.3%
- CVE-2024-5623 Untrusted search path vulnerability in B&R APROL 0.2%
- CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL 0.2%
- CVE-2024-5801 IP Forwarding enabled in B&R Automation Runtime 0.3%
- CVE-2024-5800 Diffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime 0.3%
- CVE-2021-22280 DLL Hijacking Vulnerability in Automation Studio 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%
- CVE-2024-2637 Insecure Loading of Code in B&R Products 0.2%