CVE-2024-45480

An improper control of generation of code 'Code Injection' vulnerability in the AprolCreateReport component of B APROL 4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system...

CVE-2024-45480

CVE-2024-45480 concerns B&R APROL’s AprolCreateReport component (versions before 4.4-00P5). The flaw is described as improper control of code generation, enabling an unauthenticated, network-based attacker to read local system files (code injection-related exposure) with high impact on confidenti...

PT-2025-12728

Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5 Description An improper control of generation of code, also known as 'Code Injection', in the AprolCreateReport component may allow an unauthenticated network-based attacker to read files from the local...

CVE-2024-45480: Improper Control of Generation of Code

An improper control of generation of code 'Code Injection' vulnerability in the AprolCreateReport component of B&R APROL 4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system...