Security Advisory
CVE-2024-0220
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.