B&R Industrial Automation GmbH
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| APROL | 11 | – | Jul 6, 2026 |
| Automation Runtime | 4 | – | Jan 19, 2026 |
| B&R Automation Studio | 1 | – | Jan 19, 2026 |
| B&R mapp Cockpit | 1 | – | Dec 2, 2024 |
| B&R mapp Motion | 1 | – | Dec 2, 2024 |
| B&R mapp Services | 1 | – | Dec 2, 2024 |
| B&R mapp View | 1 | – | Dec 2, 2024 |
| B&R mapp Vision | 1 | – | Dec 2, 2024 |
| mapp Services | 1 | – | Sep 3, 2026 |
| PPT30 Operating System | 1 | – | May 26, 2026 |
| Process Visualization Interface (PVI) | 1 | – | Jan 29, 2026 |
Exploited and recent CVEs
- CVE-2026-79679 Use of Weak Credentials 0.3%
- CVE-2026-6901 Untrusted Search Path 0.2%
- CVE-2026-6900 Improper Certificate Validation 0.2%
- CVE-2025-11482 Allocation of Resources Without Limits or Throttling in the OPC-UA Server 0.3%
- CVE-2026-0936 Insertion of Sensitive Information into Logfile 0.1%
- CVE-2025-11044 Vulnerability on Automation Runtime my cause DoS Conditions 0.4%
- CVE-2025-11043 Improper Server Certificate Validation in Automation Studio 0.2%
- CVE-2025-11498 CSV Formula Injection Vulnerability 0.3%
- CVE-2025-3449 Weak Session Token used in Automation Runtime SDM 0.2%
- CVE-2025-3448 XSS on SDM 0.3%
- CVE-2024-10210 Path traversal in APROL Web Portal 0.5%
- CVE-2024-45484 Enabled ICMP redirection in B&R APROL 0.2%
- CVE-2024-45483 Missing GRUB password in B&R APROL 0.2%
- CVE-2024-10209 Incorrect Permission Assignment in APROL file system 0.1%
- CVE-2024-10208 Cross Site Scripting vulnerability in APROL Web Portal 0.4%
- CVE-2024-10207 Server-Side Request Forgery (authenticated) in APROL Web Portal 0.4%
- CVE-2024-10206 Server-Side Request Forgery (unauthenticated) in APROL Web Portal 0.4%
- CVE-2024-8314 Improper session handling in B&R APROL 0.4%
- CVE-2024-8313 Default or Guessable SNMP community names in B&R APROL 0.2%
- CVE-2024-10490 Authentication bypass flaw in several mapp components 0.5%
- CVE-2024-10490 Authentication bypass flaw in several mapp components 0.5%
- CVE-2024-10490 Authentication bypass flaw in several mapp components 0.5%
- CVE-2024-10490 Authentication bypass flaw in several mapp components 0.5%
- CVE-2024-10490 Authentication bypass flaw in several mapp components 0.5%