Lucene search
HistoryJul 26, 2023 - 6:15 p.m.
CVE-2023-3242
portmapper
b&r industrial automation
denial-of-service
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
34.1%
Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions.
Affected configurations
Node
br-automationautomation_runtimeRange<g4.93
| Vendor | Product | Version | CPE |
|---|---|---|---|
| br-automation | automation_runtime | * | cpe:2.3:a:br-automation:automation_runtime:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2023-07-26 18:15:00
cve
cve
CVE-2023-3242
2023-07-26 18:15:11
cvelist
cvelist
CVE-2023-3242
2023-07-26 17:36:18
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
34.1%
Related for NVD:CVE-2023-3242