How many CVEs does B&R Industrial Automation Automation Studio have?

B&R Industrial Automation Automation Studio has 12 published CVE records since 2020.

How many B&R Industrial Automation Automation Studio CVEs are in CISA KEV?

None of B&R Industrial Automation Automation Studio's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for B&R Industrial Automation Automation Studio vulnerabilities?

No B&R Industrial Automation Automation Studio CVEs currently have a tracked public exploit in this dataset.

Which versions of B&R Industrial Automation Automation Studio are affected?

62 distinct B&R Industrial Automation Automation Studio versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in B&R Industrial Automation Automation Studio CVEs?

B&R Industrial Automation Automation Studio's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-23 (Relative Path Traversal), CWE-264.

What is the average severity of B&R Industrial Automation Automation Studio CVEs?

The average CVSS base score across B&R Industrial Automation Automation Studio's scored CVEs is 8.1.

B&R Industrial Automation Automation Studio Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every B&R Industrial Automation Automation Studio version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

4.0.x3 CVEs
4.1.x3 CVEs
4.2.x3 CVEs
< 4.3.11SP2 CVEs
< 4.4.9SP2 CVEs
< 4.6.3SP2 CVEs
< 4.7.22 CVEs
< 4.5.4SP1 CVE
< 4.5.5SP1 CVE
< 4.8.11 CVE

Version ranges

4.1 <= v <= 4.1.17.1133 CVEs
4.2 <= v <= 4.2.14.1193 CVEs
4.0 <= v <= 4.0.29.872 CVEs
4.0 <= v <= 4.122 CVEs
4.3 <= v < 4.3.112 CVEs
4.4 <= v < 4.4.92 CVEs
4.7 <= v < 4.7.22 CVEs
4.7.0 <= v < 4.7.7 SP2 CVEs
4.8 <= v < 4.8.6.302 CVEs
4.8.0 <= v < 4.8.6 SP2 CVEs
4.9 <= v < 4.9.4.922 CVEs
4.9.0 <= v < 4.9.4 SP2 CVEs
< 4.121 CVE
< 4.61 CVE
< 4.7.7.741 CVE
>= 41 CVE
2.7 <= v <= 2.71 CVE
3.0.71 <= v <= 3.0.711 CVE
3.0.80 <= v <= 3.0.801 CVE
3.0.81 <= v <= 3.0.811 CVE
3.0.90 <= v <= 3.0.901 CVE
4.0 <= v < 4.121 CVE
4.0 <= v < 4.61 CVE
4.0 <= v < 4.7.7.741 CVE
4.0 <= v <= 4.0.32.151 CVE
4.0 <= v <= 4.61 CVE
4.0.0 <= v <= 4.6.41 CVE
4.5 <= v < 4.5.41 CVE
4.5 <= v < 4.5.51 CVE
4.6 <= v < 4.6.31 CVE
4.6 <= v < 4.6.41 CVE
4.6.0 <= v <= 4.6.x1 CVE
4.7.2 <= v <= 4.7.21 CVE
4.8 <= v <= 4.81 CVE

Fixed in

> 4.122 CVEs
4.3.112 CVEs
4.4.92 CVEs
4.7.22 CVEs
4.7.7 SP2 CVEs
4.7.7.742 CVEs
4.8.6 SP2 CVEs
4.8.6.302 CVEs
4.9.4 SP2 CVEs
4.9.4.922 CVEs
> 4.61 CVE
> 4.6.x1 CVE
4.121 CVE
4.5.41 CVE

Find a version

12 CVEs

Sort

Improper Server Certificate Validation in Automation Studio
CVE-2025-11043
Patch
CWE-295
Critical · CVSS 9.1
EPSS 0.2% (12th pct)2026-01-19
High vulnerability · 2024-05-14
CVE-2021-22280
Patch
CWE-20
High · CVSS 7.2
EPSS 0.2% (6th pct)2024-05-14
B&R products use insufficient communication encryption
CVE-2024-0220
Patch
CWE-94
High · CVSS 8.3
EPSS 0.4% (29th pct)2024-02-22
High vulnerability · 2024-02-02
CVE-2021-22281
Patch
Workaround
CWE-23
High · CVSS 7.5
EPSS 0.4% (31th pct)2024-02-02
High vulnerability · 2024-02-02
CVE-2020-24682
Patch
Workaround
CWE-428
High · CVSS 7.8
EPSS 0.1% (4th pct)2024-02-02
High vulnerability · 2024-02-02
CVE-2020-24681
Patch
Workaround
CWE-732
High · CVSS 8.8
EPSS 0.2% (5th pct)2024-02-02
RCE in B&R Automation Studio with crafted project files
CVE-2021-22282
Patch
Workaround
CWE-94
High · CVSS 8.3
EPSS 0.4% (33th pct)2024-02-02
Critical vulnerability · 2022-08-11
CVE-2021-22289CWE-20
Critical · CVSS 9.8
EPSS 0.8% (53th pct)2022-08-11
High vulnerability · 2020-04-29
CVE-2019-19100
Patch
CWE-264
High · CVSS 7.5
EPSS 0.3% (19th pct)2020-04-29
High vulnerability · 2020-04-29
CVE-2019-19102CWE-22
High · CVSS 7.5
EPSS 1.2% (67th pct)2020-04-29
Medium vulnerability · 2020-04-29
CVE-2019-19101
Patch
CWE-326
Medium · CVSS 6.5
EPSS 0.5% (42th pct)2020-04-29
Critical vulnerability · 2020-04-20
CVE-2019-19108CWE-798
Critical · CVSS 9.4
EPSS 1.6% (74th pct)2020-04-20

B&R Industrial Automation Automation Studio Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other B&R Industrial Automation products

Frequently asked questions

References

Track B&R Industrial Automation Automation Studio vulnerabilities