Critical · published April 20, 2020
🚨 A simple oversight in B&R Automation's SNMP service lets anyone uninvited adjust your system settings — no password required! 🔥 Think of it like a restaurant where anyone can walk in and change the menu without the chef's approval. That’s the level of access these unauthenticated users have — effectively running the kitchen! An attacker could not only change crucial settings but potentially disrupt production processes entirely. The consequences could range from minor inconveniences to absolutely devastating operational failures that could cripple your systems and lead to significant losses.
Think of it like a restaurant where anyone can walk in and change the menu without the chef's approval. That’s the level of access these unauthenticated users have — effectively running the kitchen! This vulnerability permits unauthenticated users to modify the configuration of B&R Automation Runtime systems through the SNMP service, allowing a complete reconfiguration without any authentication checks.
An attacker could not only change crucial settings but potentially disrupt production processes entirely. The consequences could range from minor inconveniences to absolutely devastating operational failures that could cripple your systems and lead to significant losses. Patch your systems immediately to the latest versions available (4.72 or above) to close this critical hole. Review your SNMP settings and ensure only trusted sources are allowed access. Regularly monitor your system configurations for unauthorized changes. You've got this! Follow these steps, and you'll be a security hero in no time! 🛡️