B&R Industrial Automation B&R APROL 代码注入漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A code injection vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from a code injection in the AprolCreateReport component that could allow a...

B&R Industrial Automation B&R APROL 安全漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P1, which stems from an SSH server containing functionality from an untrusted control realm, whic...

B&R Industrial Automation B&R APROL 安全漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from incomplete filtering of special elements of SSH server scripts, which could...

B&R Industrial Automation B&R APROL 安全漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from an unrestricted or throttled resource allocation in the operating system's...

B&R Industrial Automation B&R APROL 安全漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from the exposure of sensitive system information by the SNMP component, which...

CVE-2024-5622

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5623

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5624

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5623

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5622

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5624

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-5624

CVE-2024-5624 is a reflected XSS vulnerability in the Shift Logbook component of B&R APROL, affecting versions up to R 4.4-00P3. The issue is caused by a cross-site scripting flaw in the Shift Logbook application that could allow a network-based attacker to execute arbitrary JavaScript in the use...

CVE-2024-5623 Untrusted search path vulnerability in B&R APROL

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5623

CVE-2024-5623 affects B&R APROL up to R 4.4-00P3. The vulnerability is an untrusted search path that could allow an authenticated local attacker to cause other users to execute arbitrary code with the attacker’s privileges. Documents confirm the affected software and the root cause, but do not pr...

CVE-2024-5623 Untrusted search path vulnerability in B&R APROL

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5622 Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5622

The CVE-2024-5622 entry concerns B&R APROL (AprolConfigureCCServices). Multiple sources corroborate an untrusted search path vulnerability that could allow an authenticated local attacker to execute arbitrary code with elevated privileges. Affected are APROL versions R 4.2.-07P3 and R 4.4-00P3 or...