Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: B&R APROL 4.4-00P5 Clear all filters
TI-2024-30524 CVE-2024-45481 · GHSA-qwrg-rgf8-83h9

Improper authentication in SSH of B&R APROL

Priority LOW 38

An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B&R APROL <4.4-00P5 may allow an authenticated local attacker to authenticate as another legitimate user.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.0015 Published 2025-03-25 Fixed in 4.4-00P5 CWE-791
TI-2024-30523 CVE-2024-45480 · GHSA-fq2h-hwcv-889h

Unauthorized local file reading in B&R APROL

Priority MEDIUM 48

An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00406 Published 2025-03-25 Fixed in 4.4-00P5 CWE-94
TI-2024-07709 CVE-2024-8315 · GHSA-h948-gjv3-7gpc

Improper Handling of Insufficient Permissions or Privileges in B&R APROL

Priority LOW 29

An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B&R APROL <4.4-00P5 may allow an authenticated local attacker to read credential information.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00134 Published 2025-03-25 Fixed in 4.4-00P5 CWE-280