CVE-2022-4286 Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime

A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...

CVE-2022-4286

Summary: CVE-2022-4286 affects B&R Automation Runtime’s System Diagnostics Manager, with vulnerable versions 3.00 through C4.93. A reflected XSS allows a remote attacker to execute arbitrary JavaScript in the victim’s browser session. The root cause is improper neutralization of input during web ...

CVE-2022-4286 Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime

A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...

D-Link DIR-825 Rev B <= 2.10b02 NULL Pointer Dereference Vulnerability

D-Link DIR-825 Rev. B devices are prone to a NULL pointer dereference vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-43764

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...

CVE-2022-43762

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...

CVE-2022-43763

Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions R 4.2-07...

CVE-2022-43765

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

CVE-2022-43765

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

Buffer overflow

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...

Design/Logic Flaw

Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions R 4.2-07...

Code injection

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...

CVE-2022-43765 DoS in APROLs Tbase server

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

CVE-2022-43765 DoS in APROLs Tbase server

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

CVE-2022-43765

B&R APROL (before R 4.2-07) is affected by a DoS vulnerability in the Tbase database server. The issue stems from incorrect checking of a return value when processing specially formatted data packets sent to port 55502/tcp, which can be exploited remotely to cause an application DoS. Affected sof...

CVE-2022-43761

Missing authentication when creating and managing the B&R APROL database in versions R 4.2-07 allows reading and changing the system configuration...

CVE-2022-43764

CVE-2022-43764 affects B&R APROL, specifically the Tbase server. The vulnerability stems from insufficient validation of input parameters when changing configuration, which can cause a buffer overflow. Impact as documented includes Denial-of-Service conditions and potential execution of arbitrary...

CVE-2022-43763

CVE-2022-43763 affects B&R APROL prior to R 4.2-07. The vulnerability is an insufficient check of preconditions in the Tbase server that can lead to a Denial of Service when commands are called. Affected component: Tbase server within APROL; affected versions: APROL

CVE-2022-43762 Memory leak when receiving messages in APROL Tbase server

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...

CVE-2022-43762

CVE-2022-43762 affects B&R APROL Tbase server prior to R 4.2-07. The issue is caused by a lack of verification in the Tbase server, leading to memory leaks when receiving messages. Affected versions are before R 4.2-07. Remediation observed in sources: update to R 4.2-07 or later; as a temporary ...