CVE-2019-19872

CVE-2019-19872 affects B&R Industrial Automation APROL before R4.2 V7.08, where the AprolLoader could be used to inject and execute arbitrary unintended commands under an unspecified attack scenario. The accompanying Red Hat/PRION/NVD records describe related issues in APROL (before R4.2 V7.08) i...

CVE-2019-19869

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

CVE-2019-19869

CVE-2019-19869 affects B&R Industrial Automation APROL (before R4.2 V7.08). The issue allows PVs to be changed via the IosHttp service and JSON interface in unencrypted form, impacting data integrity. No explicit exploit details or in-wild exploitation are provided in the documents. Remediation/v...

CVE-2019-19872: Improper Neutralization of Special Elements used in a Command

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

PT-2020-9820

‼ CVE-2019-19877 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357. 📖 Read via...

PT-2020-10276

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983...

PT-2020-11369

‼ CVE-2019-19873 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983. 📖 Read via "National Vulnerability Database"...

PT-2020-9046

‼ CVE-2019-19876 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006. 📖 Read via "National Vulnerability Database"...

PT-2020-10279

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered in the EnMon PHP script, which is vulnerable to SQL injection. Recommendations For versions prior to R4.2 V7.08, update to version R4.2 V7.08 or...

PT-2020-10275

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows the injection and execution of arbitrary unintended commands via an unspecified attack scenario. Recommendations For versions prior to...

B&R Industrial Automation APROL Path Traversal Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. A path traversal vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to attack...

B&r Automation APROL Authorization Issues Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to bypass authenticati...

PT-2020-9822

🚨 CVE-2019-19875 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected using Python scripts via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364...

PT-2020-9819

‼ CVE-2019-19873 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983. 📖 Read via "National Vulnerability Database"...

PT-2020-10277

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered in the web interface of the affected software, where some web scripts allowed injection and execution of arbitrary unintended commands on the web...

PT-2020-9821

🚨 CVE-2019-19878 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358. 🎖@cveNotify...

PT-2020-10281

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows an attacker to bypass authentication and gain access to historical data from AprolSqlServer. Recommendations For versions prior to R4....

B&r Automation APROL Command Injection Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. A command injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which can be exploited to execute with root privileges by...

CVE-2019-19869: Undefined Security Weakness

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

PT-2020-10273

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows Process Variables PVs to be changed without encryption. This can be achieved by utilizing the IosHttp service and the JSON interface...