CVE-2024-5801CWE-1188CWE-653

IP Forwarding enabled in B&R Automation Runtime

Medium · published August 10, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

Enabled IP Forwarding feature in B&R Automation Runtime versions before 6.0.2 may allow remote attack-ers to compromise network security by routing IP-based packets through the host, potentially by-passing firewall, router, or NAC filtering.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00251 · 15.5th percentile
Weaknesses
CWE-1188 · Initialization of a Resource with an Insecure Default; CWE-653 · Improper Isolation or Compartmentalization
Published
2024-08-10T03:52Z
EPSS history
Timeline
  • 10 AUG 03:52Z
    IP Forwarding enabled in B&R Automation Runtime
    cvelistv5