title: Automation Runtime TFTP Service DoS Vulnerability
description: A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition.
problem types: CWE-401 Improper Release of Memory Before Removing Last Reference
affected:
{
product: Automation Runtime
vendor: B&R
versions:
lessThanOrEqual: 4.1x, status: affected, version: unspecified, versionType: custom
lessThan: N4.26, status: affected, version: 4.2x, versionType: custom
lessThan: N4.34, status: affected, version: 4.3x, versionType: custom
lessThan: F4.45, status: affected, version: 4.4x, versionType: custom
lessThan: E4.53, status: affected, version: 4.5x, versionType: custom
lessThan: D4.63, status: affected, version: 4.6x, versionType: custom
lessThan: A4.73, status: affected, version: 4.7x, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.8
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
version: 3.1
]