A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ABB
Published: 2020-04-29T02:09:21
Updated: 2024-08-05T02:09:39.275Z
Reserved: 2019-11-18T00:00:00
Link: CVE-2019-19100
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-04-29T03:15:16.503
Modified: 2021-09-14T14:00:53.163
Link: CVE-2019-19100
Redhat
No data.