CVE-2024-5800

HIGH

Br-automation Automation Runtime < 6.0.2 - Weak Encryption

Title source: rule

Description

Diffie-Hellman groups with insufficient strength are used in the SSL/TLS stack of B&R Automation Runtime versions before 6.0.2, allowing a network attacker to decrypt the SSL/TLS communication.

References (1)

[Vendor Advisory] https://www.br-automation.com/fileadmin/SA24P011-d8aaf02f.pdf

Scores

CVSS v3 7.5

EPSS 0.0010

EPSS Percentile 26.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-326

Status published

Products (1)

br-automation/automation_runtime < 6.0.2

Published Aug 12, 2024

Tracked Since Feb 18, 2026