[Control systems] B&R security advisory (AV24-261)

Serial number: AV24-261
Date: May 14, 2024

On May 14, 2024, B&R published an ICS advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

• Automation Runtime Simulation – version 14.93 and prior
• B&R Hypervisor Installer – version 14.93 and prior
• mapp Cockpit – versions prior to 5.24.2
• mapp Safety – versions prior to 5.24.2
• mapp Vision – versions prior to 5.26.1
• mapp View – versions prior to 5.24.2
• Scene Viewer – versions prior to 4.4
• Visual Components 4 – versions prior to 4.73.2

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Insecure Loading of Code in B&R Products (PDF)
• B&R Cyber Security Advisories and Notices