CVE-2020-11643

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

Vendor	Product	Versions
B&R	GateManager	>= 4260, < 9.0.20262; >= 9250, < 9.0.20262; >= 8250, < 9.2.620236042

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-273-03Third Party Advisory, US Government Resource
https://www.br-automation.com/downloads_br_productcatalogue/assets/1600003183751-de-original-1.0.pdfVendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-273-03Third Party Advisory, US Government Resource
https://www.br-automation.com/downloads_br_productcatalogue/assets/1600003183751-de-original-1.0.pdfVendor Advisory

Timeline

Published: Oct 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-116446.5The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620 CVE-2020-116456.5A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows a CVE-2020-116464.3A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 CVE-2020-116477.5In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/pa CVE-2020-116496.5An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.CVE-2020-11657.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service. An attacker who successfully expl CVE-2020-116507.5An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The l CVE-2020-116519.8An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly CVE-2020-116526.5An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to CVE-2020-116537.5An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communicatio CVE-2020-116557.5SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the A CVE-2020-116569.8In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compo