Advisories · Technology
B&R Industrial Automation B&R APROL.
Every CVE that names B&R Industrial Automation B&R APROL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Privilege escalation in B&R APROL
- B&R Industrial Automation B&R APROL
- CWE-829
- CVSS 8.5 High
Improper authentication in SSH of B&R APROL
- B&R Industrial Automation B&R APROL
- CWE-791
- CVSS 9.2 CriticalCritical · CVSS 9+
Unauthorized local file reading in B&R APROL
- B&R Industrial Automation B&R APROL
- Code injection
- CVSS 6.8 Medium
Improper Handling of Insufficient Permissions or Privileges in B&R APROL
- B&R Industrial Automation B&R APROL
- CWE-280
- CVSS 5.1 Medium
Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL
- B&R Industrial Automation B&R APROL
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Untrusted search path vulnerability in B&R APROL
- B&R Industrial Automation B&R APROL
- Privilege escalation
- CVSS 7.3 High
Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL
- B&R Industrial Automation B&R APROL
- Privilege escalation
- CVSS 7.5 High
DoS in APROLs Tbase server
- B&R Industrial Automation B&R APROL
- CWE-252
- CVSS 9.8 CriticalCritical · CVSS 9+
Buffer overflow when changing configuration on Tbase Server
- B&R Industrial Automation B&R APROL
- Memory corruption
- CVSS 7.5 High
Lack of checking preconditions in APROL
- B&R Industrial Automation B&R APROL
- CWE-252
- CVSS 7.5 High
Memory leak when receiving messages in APROL Tbase server
- B&R Industrial Automation B&R APROL
- Memory corruption
- CVSS 9.4 CriticalCritical · CVSS 9+
Lack of authentication when managing APROL database
- B&R Industrial Automation B&R APROL
- Authentication bypass