CVE-2019-19101 - Vulnerability Details - OpenCVE

A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Br-automation	Automation Studio

Configuration 1 [-]

OR	cpe:2.3:a:br-automation:automation_studio::::::::
	cpe:2.3:a:br-automation:automation_studio::::::::
	cpe:2.3:a:br-automation:automation_studio::::::::
	cpe:2.3:a:br-automation:automation_studio::::::::
	cpe:2.3:a:br-automation:automation_studio::::::::
	cpe:2.3:a:br-automation:automation_studio::::::::
	cpe:2.3:a:br-automation:automation_studio::::::::
	cpe:2.3:a:br-automation:automation_studio::::::::

No data.

References

Link	Providers
https://www.br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio/

History

No history.

MITRE

Status: PUBLISHED

Assigner: ABB

Published: 2020-04-29T02:07:32

Updated: 2024-08-05T02:09:39.436Z

Reserved: 2019-11-18T00:00:00

Link: CVE-2019-19101

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-04-29T03:15:16.580

Modified: 2024-11-21T04:34:11.993

Link: CVE-2019-19101

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Automation Studio", "vendor": "B&R", "versions": [{"status": "affected", "version": "4.0.x"}, {"status": "affected", "version": "4.1.x"}, {"status": "affected", "version": "4.2.x"}, {"status": "affected", "version": "< 4.3.11SP"}, {"status": "affected", "version": "< 4.4.9SP"}, {"status": "affected", "version": "< 4.5.5SP"}, {"status": "affected", "version": "< 4.6.3SP"}, {"status": "affected", "version": "< 4.7.2"}]}], "descriptions": [{"lang": "en", "value": "A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-326", "description": "CWE-326 Inadequate Encryption Strength", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-04-29T02:07:31", "orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "shortName": "ABB"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio/"}], "source": {"discovery": "UNKNOWN"}, "title": "Incomplete communication encryption and validation in B&R Automation Studio upgrade service", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cybersecurity@ch.abb.com", "ID": "CVE-2019-19101", "STATE": "PUBLIC", "TITLE": "Incomplete communication encryption and validation in B&R Automation Studio upgrade service"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Automation Studio", "version": {"version_data": [{"version_value": "4.0.x"}, {"version_value": "4.1.x"}, {"version_value": "4.2.x"}, {"version_value": "< 4.3.11SP"}, {"version_value": "< 4.4.9SP"}, {"version_value": "< 4.5.5SP"}, {"version_value": "< 4.6.3SP"}, {"version_value": "< 4.7.2"}]}}]}, "vendor_name": "B&R"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-326 Inadequate Encryption Strength"}]}]}, "references": {"reference_data": [{"name": "https://www.br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio/", "refsource": "CONFIRM", "url": "https://www.br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio/"}]}, "source": {"discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T02:09:39.436Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio/"}]}]}, "cveMetadata": {"assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "assignerShortName": "ABB", "cveId": "CVE-2019-19101", "datePublished": "2020-04-29T02:07:32", "dateReserved": "2019-11-18T00:00:00", "dateUpdated": "2024-08-05T02:09:39.436Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C66F8E7-1E05-4F25-9B9E-7E580CBE2ABA", "versionEndIncluding": "4.0.29.87", "versionStartIncluding": "4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B1DFEE8-D096-4181-A28A-8D9C0F494B6A", "versionEndIncluding": "4.1.17.113", "versionStartIncluding": "4.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "7FF85042-3F53-4BC2-BD29-36D2EA243918", "versionEndIncluding": "4.2.14.119", "versionStartIncluding": "4.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "7987D40F-C2E4-4649-821F-14B415D98A80", "versionEndExcluding": "4.3.11", "versionStartIncluding": "4.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C18C4E6-1F62-46D6-93CD-12C53B0F9D06", "versionEndExcluding": "4.4.9", "versionStartIncluding": "4.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "3BF1A396-AB6C-4EAF-8717-D6605C16AFD4", "versionEndExcluding": "4.5.5", "versionStartIncluding": "4.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "685A88B8-FCE1-48B7-8394-B645281D26ED", "versionEndExcluding": "4.6.4", "versionStartIncluding": "4.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:br-automation:automation_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "7046AEE9-A813-4407-8A69-F9FB140AD53C", "versionEndExcluding": "4.7.2", "versionStartIncluding": "4.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.5SP, < 4.6.4 and < 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server."}, {"lang": "es", "value": "Una falta de definici\u00f3n de comunicaci\u00f3n segura y una comprobaci\u00f3n TLS incompleta en el servicio de actualizaci\u00f3n en B&R Automation Studio versiones 4.0.x, 4.1.x, 4.2.x, versiones anteriores a 4.3.11SP, versiones anteriores a 4.4.9SP, versiones anteriores a 4.5.5SP, versiones anteriores a 4.6.4 y versiones anteriores a 4.7.2, permiten a usuarios no autenticados llevar a cabo ataques de tipo MITM por medio del servidor de actualizaci\u00f3n de B&R."}], "id": "CVE-2019-19101", "lastModified": "2024-11-21T04:34:11.993", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "cybersecurity@ch.abb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-04-29T03:15:16.580", "references": [{"source": "cybersecurity@ch.abb.com", "tags": ["Broken Link", "Vendor Advisory"], "url": "https://www.br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Vendor Advisory"], "url": "https://www.br-automation.com/en/downloads/032020-multiple-vulnerabilities-in-automation-studio/"}], "sourceIdentifier": "cybersecurity@ch.abb.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-326"}], "source": "cybersecurity@ch.abb.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-295"}], "source": "nvd@nist.gov", "type": "Primary"}]}