PT-2020-9822

🚨 CVE-2019-19875 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected using Python scripts via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364...

PT-2020-10278

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows arbitrary commands to be injected using Python scripts via the AprolCluster script. This script is invoked via sudo, thus executing wi...

CVE-2019-19869: Undefined Security Weakness

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...

B&r Automation APROL Security Breach

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from Australian company B&r Automation. A security vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which originates from the ability to alter...

B&r Automation APROL Injection Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from Australian company B&r Automation. An injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which stems from some web scripts in the web...

PT-2020-9820

‼ CVE-2019-19877 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357. 📖 Read via...

PT-2020-10273

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows Process Variables PVs to be changed without encryption. This can be achieved by utilizing the IosHttp service and the JSON interface...

CVE-2019-19874: Improper Neutralization of Special Elements used in a Command

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364...

PT-2020-10279

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered in the EnMon PHP script, which is vulnerable to SQL injection. Recommendations For versions prior to R4.2 V7.08, update to version R4.2 V7.08 or...

CVE-2019-19877: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357...