CVE-2021-22280 HIGH

CVE-2021-22280: DLL Hijacking Vulnerability in Automation Studio

Vendor B&R Industrial Automation
Product Automation Studio
Published May 14, 2024
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code in the context of the product.

Key dates

02Disclosure timeline

May 14, 2024 CVE published
August 3, 2024 Record updated