CVE-2020-11641

High

Description

A local file inclusion vulnerability in B&R SiteManager versions <9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances.

SeverityHigh
CVSS7.7
Exploit probability—
ProductBr-automation Sitemanager
PublishedOct 15, 2020
First seenOct 15, 2020
Weakness typeCWE-552CWE-552

How to fix

Update
  • br-automation sitemanager9.2.620236042 or later

Affected products

ProductAffected versionsFixed in
br-automation sitemanagerv < 9.2.6202360429.2.620236042

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.