Advisories · Technology
B&R Industrial Automation GmbH APROL.
Every CVE that names B&R Industrial Automation GmbH APROL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.4 High
Untrusted Search Path
- B&R Industrial Automation GmbH APROL
- CWE-426
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper Certificate Validation
- B&R Industrial Automation GmbH APROL
- Weak cryptography or TLS
- CVSS 8.4 High
Path traversal in APROL Web Portal
- B&R Industrial Automation GmbH APROL
- Path traversal
- CVSS 7.2 High
Enabled ICMP redirection in B&R APROL
- B&R Industrial Automation GmbH APROL
- Denial of service
- CVSS 7.0 High
Missing GRUB password in B&R APROL
- B&R Industrial Automation GmbH APROL
- Authentication bypass
- CVSS 8.5 High
Incorrect Permission Assignment in APROL file system
- B&R Industrial Automation GmbH APROL
- Broken access control
- CVSS 5.1 Medium
Cross Site Scripting vulnerability in APROL Web Portal
- B&R Industrial Automation GmbH APROL
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Server-Side Request Forgery (authenticated) in APROL Web Portal
- B&R Industrial Automation GmbH APROL
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Server-Side Request Forgery (unauthenticated) in APROL Web Portal
- B&R Industrial Automation GmbH APROL
- Server-side request forgery (SSRF)
- CVSS 5.5 Medium
Improper session handling in B&R APROL
- B&R Industrial Automation GmbH APROL
- Authentication bypass
- CWE-488
- CVSS 8.7 High
Default or Guessable SNMP community names in B&R APROL
- B&R Industrial Automation GmbH APROL
- Information disclosure
- CWE-1188