CVE-2024-0323
FTP uses unsecure encryption mechanisms
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
FTP uses unsecure encryption mechanisms
| Assigner | ABB |
| Reserved | 2024-01-08 |
| Published | 2024-02-05 |
| Updated | 2024-09-06 |
The FTP server used on the B&R Automation Runtime supports unsecure encryption mechanisms, such as SSLv3, TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected product clients.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CWE-1240: Use of a Cryptographic Primitive with a Risky Implementation
