CVE-2020-11637
MEDIUMB&R Automation Runtime <4.10 - Unauthenticated Denial of Service via TFTP Service Memory Leak
Title source: llmDescription
A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.br-automation.com/downloads_br_productcatalogue/assets/1595163815396-de-original-1.0.pdf
Scores
CVSS v3
5.8
EPSS
0.0108
EPSS Percentile
60.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Details
CWE
CWE-401
Status
published
Products (1)
br-automation/automation_runtime
< 4.10
Published
Oct 15, 2020
Tracked Since
Feb 18, 2026