CVE-2024-0323: The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can…

PriorityP347critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.23%

13.7th percentile

The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
b_r_industrial_automation	automation_runtime	>= 14.0 < 14.93	14.93
br-automation	automation_runtime	<= i4.93	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.