[Control systems] B&R security advisory (AV24-261)

Serial number: AV24-261
Date: May 14, 2024

On May 14, 2024, B&R published an ICS advisory to address a vulnerability in the following products:

• Automation Runtime Simulation – version 14.93 and prior
• B&R Hypervisor Installer – version 14.93 and prior
• mapp Cockpit – versions prior to 5.24.2
• mapp Safety – versions prior to 5.24.2
• mapp Vision – versions prior to 5.26.1
• mapp View – versions prior to 5.24.2
• Scene Viewer – versions prior to 4.4
• Visual Components 4 – versions prior to 4.73.2

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Insecure Loading of Code in B&R Products (PDF)
• B&R Cyber Security Advisories and Notices