B&R VC4

4.0*

OTHER 1 CVE

4.1*

OTHER 1 CVE

3.*

OTHER 1 CVE

4.45.3

SEMANTIC 1 CVE

4.5*

OTHER 1 CVE

4.7*

OTHER 1 CVE

4.45.1

SEMANTIC 1 CVE

4.4*

OTHER 1 CVE

4.3*

OTHER 1 CVE

4.16.3

SEMANTIC 1 CVE

4.26.8

SEMANTIC 1 CVE

3.96.7

SEMANTIC 1 CVE

4.72.9

SEMANTIC 1 CVE

4.34.6

SEMANTIC 1 CVE

4.06.7

SEMANTIC 1 CVE

4.2*

OTHER 1 CVE

CVE-2023-1617

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on the functionality provided in the visualization. This issue affects B&R VC4: from 3.* through 3.96.7, from 4.0* through 4.06.7, from 4.1* through 4.16.3, from 4.2* through 4.26.8, from 4.3* through 4.34.6, from 4.4* through 4.45.1, from 4.5* through 4.45.3, from 4.7* through 4.72.9.

CRITICAL Apr 14, 2023