CVE-2019-19108

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 through 3.10, 4.00 through 4.63, 4.72 and above

Description An authentication weakness in the SNMP service allows unauthenticated users to modify the configuration of B&R products via SNMP.

Recommendations For versions 2.96, 3.00, 3.01, 3.06 through 3.10, 4.00 through 4.63, 4.72 and above, consider disabling the SNMP service until a patch is available to prevent unauthenticated modification of the configuration. Restrict access to the SNMP service to minimize the risk of exploitation.