B&R Industrial Automation VC4 Files uncontrolled search path

Summaryinfo

A vulnerability was found in B&R Industrial Automation Scene Viewer, Automation Runtime, mapp Vision, mapp View, mapp Cockpit, mapp Safety and VC4. It has been classified as critical. This issue affects some unknown processing of the component Files Handler. This manipulation causes uncontrolled search path. This vulnerability is tracked as CVE-2024-2637. The attack is restricted to local execution. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as critical was found in B&R Industrial Automation Scene Viewer, Automation Runtime, mapp Vision, mapp View, mapp Cockpit, mapp Safety and VC4. Affected by this vulnerability is an unknown code block of the component Files Handler. The manipulation with an unknown input leads to a uncontrolled search path vulnerability. The CWE definition for the vulnerability is CWE-427. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

An authenticated local attacker who successfully exploited this vulnerability could insert and run arbitrary code using legitimate B&R software's. An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial  Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R Industrial Automation VC4 could allow an authenticated local attacker to execute malicious code by placing specially crafted files in the loading search path. This issue affects Scene Viewer: before 4.4.0; Automation Runtime: before J4.93; mapp Vision: before 5.26.1; mapp View: before 5.24.2; mapp Cockpit: before 5.24.2; mapp Safety: before 5.24.2; VC4: before 4.73.2.

It is possible to read the advisory at br-automation.com. This vulnerability is known as CVE-2024-2637 since 03/19/2024. The exploitation appears to be difficult. Attacking locally is a requirement. Additional levels of successful authentication are required for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1574 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Automation Software

Vendor

• B&R Industrial Automation

Name

• Automation Runtime
• mapp Cockpit
• mapp Safety
• mapp View
• mapp Vision
• Scene Viewer
• VC4

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion