CVE-2024-10490 Authentication bypass flaw in several mapp components
Unauthenticated attackers can bypass authentication in B&R mapp components to disclose information, modify data, or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-10490?
CVE-2024-10490 is a high-severity authentication bypass vulnerability in B&R mapp Cockpit, published on 2 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision before 6.0 may be used by an unauthenticated network-based attacker to cause information disclosure, unintended change of data, or denial of service conditions. B&R mapp Services is only affected, when mpUserX or mpCodeBox are used in the Automation Studio project.
Weakness: CWE-288
Which versions are affected by CVE-2024-10490?
How do I fix CVE-2024-10490?
No fix has been published for CVE-2024-10490 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-10490 being exploited?
There is no known exploitation of CVE-2024-10490 in the wild and no public exploit code.
Sources
Also known as GHSA-3r56-5r55-j5mh.