Critical severity9.8NVD Advisory· Published Feb 5, 2024· Updated Jun 17, 2026
CVE-2024-0323
CVE-2024-0323
Description
The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients.
Affected products
3(expand)+ 2 more
- (no CPE)
- (no CPE)range: 14.0
- cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:*range: <=i4.93
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.