CVE-2023-1617
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Improper Authentication Mechanism in B&R VC4 Visualization
Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules). This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on the functionality provided in the visualization. This issue affects B&R VC4: from 3.* through 3.96.7, from 4.0* through 4.06.7, from 4.1* through 4.16.3, from 4.2* through 4.26.8, from 4.3* through 4.34.6, from 4.4* through 4.45.1, from 4.5* through 4.45.3, from 4.7* through 4.72.9.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
B&R VC4
- Vendor
- B&R Industrial Automation
- Product
- B&R VC4
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.* | affected | custom | Unavailable | 3.96.7 | None listed |
| 4.0* | affected | custom | Unavailable | 4.06.7 | None listed |
| 4.1* | affected | custom | Unavailable | 4.16.3 | None listed |
| 4.2* | affected | custom | Unavailable | 4.26.8 | None listed |
| 4.3* | affected | custom | Unavailable | 4.34.6 | None listed |
| 4.4* | affected | custom | Unavailable | 4.45.1 | None listed |
| 4.5* | affected | custom | Unavailable | 4.45.3 | None listed |
| 4.7* | affected | custom | Unavailable | 4.72.9 | None listed |