B&R Systems Diagnostics Manager

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code to exfiltrate data and perform any action within the user's browser session.

CVEs (1)

Remediations

• B&R recommends users to update to the latest version of the product at earliest convenience (instructions to install updates is described in the user manual):
• Update all SDM products to firmware D4.93 or later.
• B&R also recommends the following workarounds to mitigate the risk of exploitation:
• Deactivate the SDM when not needed.
• Refer to “general security recommendations” in the B&R Industrial Automation’s advisory
• Do not use hyperlinks provided by untrusted third parties to access the SDM.
• Use external Web Application Firewalls when possible.
• Visit the B&R Industrial Automation’s advisory for more information.

Affected Vendors

Affected Products (2)

Affected Sectors

Chemical, Critical Manufacturing, Energy