ID: CVE-2024-0220
Published: 2024-02-22T11:15Z
Description: description_data: B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data.
CWE: problemtype_data: description: CWE-94
CWE-326
CWE-311
CWE-319