CVE-2019-19878

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358...

CVE-2019-19877

CVE-2019-19877 affects B&R Industrial Automation APROL before R4.2 V7.08. The issue is a Directory Traversal against AprolSqlServer that can allow an attacker to access sensitive information outside the working directory. The description explicitly states this is a vulnerability separate from CVE...

CVE-2019-19877

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357...

CVE-2019-19876

CVE-2019-19876 affects B&R Industrial Automation APROL prior to R4.2 V7.08. The EnMon PHP script is vulnerable to SQL injection, a separate vulnerability from CVE-2019-10006. Connected documents corroborate APROL exposure and identify the vulnerability class as SQL injection in the EnMon PHP comp...

CVE-2019-19876

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006...

CVE-2019-19875

CVE-2019-19875 affects B&R Industrial Automation APROL before R4.2 V7.08. The vulnerability arises from the AprolCluster script, which is invoked via sudo and executes with root privileges, allowing arbitrary commands to be injected and run. This is a different issue than CVE-2019-16364; multiple...

CVE-2019-19875

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected using Python scripts via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364...

CVE-2019-19874

CVE-2019-19874 affects B&R Industrial Automation APROL before R4.2 V7.08. The Red Hat entries describe an issue where web scripts in the APROL web interface allow injection and execution of arbitrary commands on the web server; the AprolCluster script can be invoked via sudo and run with root pri...

CVE-2019-19874

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364...

CVE-2019-19873

CVE-2019-19873 affects B&R Industrial Automation APROL before R4.2 V7.08. The issue allows an attacker to bypass authentication to retrieve information from the AprolSqlServer DBMS. This is described as a separate vulnerability from CVE-2019-16356 and CVE-2019-9983. Connected sources confirm the ...

CVE-2019-19873

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983...

CVE-2019-19872

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

CVE-2019-19869

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

CVE-2019-19872

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

CVE-2019-19869

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

Command injection

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

Design/Logic Flaw

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

CVE-2019-19872

CVE-2019-19872 affects B&R Industrial Automation APROL before R4.2 V7.08, where the AprolLoader could be used to inject and execute arbitrary unintended commands under an unspecified attack scenario. The accompanying Red Hat/PRION/NVD records describe related issues in APROL (before R4.2 V7.08) i...

CVE-2019-19872

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

CVE-2019-19869

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...