vulnerability
ABB B&R Automation Runtime
High
Summary
This CISA advisory details vulnerabilities within ABB B&R Automation Runtime versions prior to 6.4. Specifically, the System Diagnostic Manager (SDM) component is susceptible to reflected cross-site scripting (XSS) and improper CSV formula element neutralization, potentially allowing unauthenticated attackers to execute arbitrary code or inject malicious data. Addressing these vulnerabilities requires updating to version 6.4 and implementing appropriate security controls.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data