CVE-2024-8603

Summary

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices.

Affected Software

VendorProductVersion RangeStatus
B&R Industrial AutomationAutomation Runtime6.0 < 6.1affected
B&R Industrial AutomationAutomation Runtime4.0affected
B&R Industrial Automationmapp View6.0 < 6.1affected
B&R Industrial Automationmapp View5.0affected

Weaknesses

  • CWE-327: CWE-327 Use of a Broken or Risky Cryptographic Algorithm

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References