Design/Logic Flaw

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

Command injection

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

CVE-2019-19872

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

CVE-2019-19872

CVE-2019-19872 affects B&R Industrial Automation APROL before R4.2 V7.08, where the AprolLoader could be used to inject and execute arbitrary unintended commands under an unspecified attack scenario. The accompanying Red Hat/PRION/NVD records describe related issues in APROL (before R4.2 V7.08) i...

CVE-2019-19869

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

CVE-2019-19869

CVE-2019-19869 affects B&R Industrial Automation APROL (before R4.2 V7.08). The issue allows PVs to be changed via the IosHttp service and JSON interface in unencrypted form, impacting data integrity. No explicit exploit details or in-wild exploitation are provided in the documents. Remediation/v...

B&r Automation APROL Authorization Issues Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to bypass authenticati...

B&r Automation APROL Security Breach

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from Australian company B&r Automation. A security vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which originates from the ability to alter...

B&r Automation APROL SQL Injection Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. A SQL injection vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which makes EnMon PHP scripts susceptible to SQL injection attacks...

B&r Automation APROL Command Injection Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. A command injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which can be exploited to execute with root privileges by...

B&r Automation APROL Injection Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from Australian company B&r Automation. An injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which stems from some web scripts in the web...

B&r Automation APROL Authorization Issues Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from Australian company B&r Automation. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to access...

B&R Industrial Automation APROL Path Traversal Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. A path traversal vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to attack...

B&R Industrial Automation APROL Injection Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. An injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which can be exploited to inject and execute arbitrary...