CVE-2023-3242

High

Description

Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions.

SeverityHigh
CVSS8.6
Exploit probability—
ProductBr-automation Automation Runtime
PublishedJul 26, 2023
First seenJul 26, 2023

How to fix

Update
  • br-automation automation_runtimeg4.93 or later

Affected products

ProductAffected versionsFixed in
br-automation automation_runtimev < g4.93g4.93

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.