B&R Industrial Automation GmbH

Products

ProductCVEsExploitedLatest
APROL11–Jul 6, 2026
Automation Runtime4–Jan 19, 2026
B&R Automation Studio1–Jan 19, 2026
B&R mapp Cockpit1–Dec 2, 2024
B&R mapp Motion1–Dec 2, 2024
B&R mapp Services1–Dec 2, 2024
B&R mapp View1–Dec 2, 2024
B&R mapp Vision1–Dec 2, 2024
mapp Services1–Sep 3, 2026
PPT30 Operating System1–May 26, 2026
Process Visualization Interface (PVI)1–Jan 29, 2026

Exploited and recent CVEs

  • CVE-2026-79679 High 8.7 Use of Weak Credentials 0.3%
  • CVE-2026-6901 High 7.7 Untrusted Search Path 0.2%
  • CVE-2026-6900 High 7.4 Improper Certificate Validation 0.2%
  • CVE-2025-11482 High 7.5 Allocation of Resources Without Limits or Throttling in the OPC-UA Server 0.3%
  • CVE-2026-0936 Medium 5.0 Insertion of Sensitive Information into Logfile 0.1%
  • CVE-2025-11044 Medium 6.8 Vulnerability on Automation Runtime my cause DoS Conditions 0.4%
  • CVE-2025-11043 High 7.4 Improper Server Certificate Validation in Automation Studio 0.2%
  • CVE-2025-11498 Medium 6.1 CSV Formula Injection Vulnerability 0.3%
  • CVE-2025-3449 Medium 4.2 Weak Session Token used in Automation Runtime SDM 0.2%
  • CVE-2025-3448 Medium 6.1 XSS on SDM 0.3%
  • CVE-2024-10210 High 8.4 Path traversal in APROL Web Portal 0.5%
  • CVE-2024-45484 High 7.2 Enabled ICMP redirection in B&R APROL 0.2%
  • CVE-2024-45483 High 7.0 Missing GRUB password in B&R APROL 0.2%
  • CVE-2024-10209 High 8.5 Incorrect Permission Assignment in APROL file system 0.1%
  • CVE-2024-10208 Medium 5.1 Cross Site Scripting vulnerability in APROL Web Portal 0.4%
  • CVE-2024-10207 Medium 5.3 Server-Side Request Forgery (authenticated) in APROL Web Portal 0.4%
  • CVE-2024-10206 Medium 6.9 Server-Side Request Forgery (unauthenticated) in APROL Web Portal 0.4%
  • CVE-2024-8314 Medium 5.5 Improper session handling in B&R APROL 0.4%
  • CVE-2024-8313 High 8.7 Default or Guessable SNMP community names in B&R APROL 0.2%
  • CVE-2024-10490 High 8.4 Authentication bypass flaw in several mapp components 0.5%
  • CVE-2024-10490 High 8.4 Authentication bypass flaw in several mapp components 0.5%
  • CVE-2024-10490 High 8.4 Authentication bypass flaw in several mapp components 0.5%
  • CVE-2024-10490 High 8.4 Authentication bypass flaw in several mapp components 0.5%
  • CVE-2024-10490 High 8.4 Authentication bypass flaw in several mapp components 0.5%