EUVD-2019-9466

Malware in sbrugna...

CVE-2019-19873

An issue was discovered in B Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983...

CVE-2019-19877: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357...

PT-2020-9820

‼ CVE-2019-19877 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357. 📖 Read via...

PT-2020-9821

🚨 CVE-2019-19878 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358. 🎖@cveNotify...

PT-2020-10281

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows an attacker to bypass authentication and gain access to historical data from AprolSqlServer. Recommendations For versions prior to R4....

B&R Industrial Automation APROL Path Traversal Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. A path traversal vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to attack...

CVE-2019-19878: Undefined Security Weakness

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358...

CVE-2019-19873: Undefined Security Weakness

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983...

PT-2020-10280

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows an attacker to access sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer...

PT-2020-9819

‼ CVE-2019-19873 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983. 📖 Read via "National Vulnerability Database"...

PT-2020-10276

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983...

PT-2020-11369

‼ CVE-2019-19873 ‼ An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983. 📖 Read via "National Vulnerability Database"...