CVE-2024-0220

Publication date

2024-02-22 10:15:44

Family

ABB

State

PUBLISHED

Description

B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.