5365 matches found
CVE-2019-19875
CVE-2019-19875 affects B&R Industrial Automation APROL before R4.2 V7.08. The vulnerability arises from the AprolCluster script, which is invoked via sudo and executes with root privileges, allowing arbitrary commands to be injected and run. This is a different issue than CVE-2019-16364; multiple...
CVE-2019-19874
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364...
CVE-2019-19874
CVE-2019-19874 affects B&R Industrial Automation APROL before R4.2 V7.08. The Red Hat entries describe an issue where web scripts in the APROL web interface allow injection and execution of arbitrary commands on the web server; the AprolCluster script can be invoked via sudo and run with root pri...
CVE-2019-19873
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983...
CVE-2019-19872
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...
CVE-2019-19869
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...
Design/Logic Flaw
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...
Command injection
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...
CVE-2019-19872
CVE-2019-19872 affects B&R Industrial Automation APROL before R4.2 V7.08, where the AprolLoader could be used to inject and execute arbitrary unintended commands under an unspecified attack scenario. The accompanying Red Hat/PRION/NVD records describe related issues in APROL (before R4.2 V7.08) i...
CVE-2019-19872
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...
CVE-2019-19869
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed unencrypted by using the IosHttp service and the JSON interface...
CVE-2019-19869
CVE-2019-19869 affects B&R Industrial Automation APROL (before R4.2 V7.08). The issue allows PVs to be changed via the IosHttp service and JSON interface in unencrypted form, impacting data integrity. No explicit exploit details or in-wild exploitation are provided in the documents. Remediation/v...
B&r Automation APROL Authorization Issues Vulnerability
B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to bypass authenticati...
B&r Automation APROL Command Injection Vulnerability
B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. A command injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which can be exploited to execute with root privileges by...
B&R Industrial Automation APROL Path Traversal Vulnerability
B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. A path traversal vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to attack...
HPESBST04064 rev.1 - HPE B-series Fibre Channel SAN Switch Brocade Fabric OS (FOS), Remote Unauthorized Access
Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN3600B Fibre Channel Switch - Prior to v9.0.0a, and v8.1.0 to v8.2.2c HPE B-series SN4000B SAN Extension Switch - Prior to v9.0.0a, and v8.1.0 to v8.2.2c HPE B-seri...
CVE-2020-25172
A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...
CVE-2020-25172
A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...