B&R Industrial Automation APROL 跨站脚本漏洞

B&R Industrial Automation APROL is a production process management system from B&R Industrial Automation, Austria. A cross-site scripting vulnerability exists in B&R Industrial Automation APROL R version 4.4-00P3 and prior versions, which stems from a cross-site scripting vulnerability contained ...

PT-2024-36765 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions = R 4.4-00P3 Description: An untrusted search path vulnerability exists in the software, allowing an authenticated local attacker to execute arbitrary code under other users' privileges. Recommendations: For B&R APROL...

B&R Industrial Automation APROL 安全漏洞

B&R Industrial Automation APROL is a production process management system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R Industrial Automation APROL R version 4.4-00P3 and prior versions that stems from the inclusion of an untrusted search path vulnerability...

B&R APROL 安全漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R APROL that stems from the presence of an untrusted search path vulnerability that allows an authenticated, local attacker to execute arbitrary code with...

PT-2024-36772 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions = R 4.4-00P3 Description: A Reflected Cross-Site Scripting XSS issue in the Shift Logbook application may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

The vulnerability of the Tbase database server in the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to trigger a service failure.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software solution is related to incorrect checking of the returned value from methods or functions. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Tbase database server in the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to trigger a service failure.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software solution is related to incorrect checking of the returned value from methods or functions. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the database server of the software solution for monitoring the status of B&R APROL industrial systems allows a hacker to read and modify configuration data.

The vulnerability of the database server of the B&R APROL software solution for monitoring the status of industrial systems is related to the absence of an authentication procedure. Exploiting this vulnerability allows a malicious actor to read and modify configuration data remotely...

The vulnerability of the Tbase database server of the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to execute arbitrary code.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2022-43764

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...

CVE-2022-43763

Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions R 4.2-07...

CVE-2022-43762

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...

CVE-2022-43762

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...

CVE-2022-43765

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

CVE-2022-43763

Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions R 4.2-07...

CVE-2022-43765

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

CVE-2022-43764

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...

Design/Logic Flaw

Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions R 4.2-07...

Buffer overflow

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...

Code injection

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...