Known Vulnerabilities for Automation Runtime by Br-automation
Listed below are 5 of the newest known vulnerabilities associated with "Automation Runtime" by "Br-automation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-54318 json | Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the Loca... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-45243 json | Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that... | Not Provided | 2026-05-18 | 2026-07-14 |
| CVE-2026-45090 json | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, ParameterAnalysis in pkg/sca... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2023-46280 json | A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All version... | Not Provided | 2024-05-14 | 2026-06-09 |
| CVE-2023-3242 json | Allocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B&R Industrial Automation B&R ... | 5.9 - MEDIUM | 2023-07-26 | 2023-08-04 |
| CVE-2022-34151 json | Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, ... | 5.9 - MEDIUM | 2022-07-04 | 2026-06-02 |
| CVE-2022-4286 json | A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions ... | 6.1 - MEDIUM | 2023-02-14 | 2023-11-07 |
| CVE-2021-22275 json | Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop th... | 8.6 - HIGH | 2022-05-13 | 2022-05-25 |
| CVE-2020-11637 json | A memory leak in the TFTP service in B&R Automation Runtime versions | 7.5 - HIGH
|
2020-10-15
|
2021-09-14
|
|
| CVE-2019-19108 json | An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.6... | 9.4 - CRITICAL | 2020-04-20 | 2020-04-29 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Br-automation | Automation Runtime | n4.34 | |||
| Application | Br-automation | Automation Runtime | n4.26 | |||
| Application | Br-automation | Automation Runtime | f4.45 | |||
| Application | Br-automation | Automation Runtime | e4.53 | |||
| Application | Br-automation | Automation Runtime | d4.63 | |||
| Application | Br-automation | Automation Runtime | a4.73 | |||
| Application | Br-automation | Automation Runtime | 4.72 | |||
| Application | Br-automation | Automation Runtime | 4.70 | |||
| Application | Br-automation | Automation Runtime | 4.63 | |||
| Application | Br-automation | Automation Runtime | 4.60 | |||
| Application | Br-automation | Automation Runtime | 4.50 | |||
| Application | Br-automation | Automation Runtime | 4.40 | |||
| Application | Br-automation | Automation Runtime | 4.30 | |||
| Application | Br-automation | Automation Runtime | 4.20 | |||
| Application | Br-automation | Automation Runtime | 4.10 | |||
| Application | Br-automation | Automation Runtime | 4.04 | |||
| Application | Br-automation | Automation Runtime | 4.03 | |||
| Application | Br-automation | Automation Runtime | 4.00 | |||
| Application | Br-automation | Automation Runtime | 3.10 | |||
| Application | Br-automation | Automation Runtime | 3.08 |