CVE-2021-22281

MEDIUM

Br-automation Automation Studio < 4.12 - Path Traversal

Title source: rule

Description

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12.

References (1)

[Vendor Advisory] https://www.br-automation.com/fileadmin/2021-11_ZipSlip_Vulnerability_in_Automation_Studio_Project_Import-b90d2f42.pdf

Scores

CVSS v3 6.3

EPSS 0.0012

EPSS Percentile 31.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Classification

CWE

CWE-22 CWE-23

Status published

Affected Products (1)

br-automation/automation_studio < 4.12

Timeline

Published Feb 02, 2024

Tracked Since Feb 18, 2026