Lucene search
HistoryFeb 08, 2023 - 10:15 a.m.
CVE-2022-43761
cve
2022
43761
authentication
b&r aprol
database management
nvd
9.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.1%
Missing authentication when creating and
managing the B&R APROL database in versions <Ā R 4.2-07
allows reading and changing the system configuration.
Affected configurations
Node
br-automationindustrial_automation_aprolRange<r4.2-07
| CPE | Name | Operator | Version |
|---|---|---|---|
| br-automation:industrial_automation_aprol | br-automation industrial automation aprol | lt | r4.2-07 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "B&R APROL",
"vendor": "B&R Industrial Automation",
"versions": [
{
"status": "affected",
"version": "< R 4.2-07"
}
]
}
]Related
cvelist
cvelist
CVE-2022-43761 Lack of authentication when managing APROL database
2023-02-08 09:33:28
nvd
nvd
CVE-2022-43761
2023-02-08 10:15:09
prion
prion
Authentication flaw
2023-02-08 10:15:00
9.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.1%
Related for CVE-2022-43761