Industrial Automation Aprol
Approved changes feed: RSS · Atom
cpe:2.3:a:br-automation:industrial_automation_aprol:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Br Automation (9a6d54fa-e6bc-5bbc-b950-3afd1660c473) |
|---|---|
| Product | Industrial Automation Aprol (81705abe-5660-59c6-bb93-ad930b923cdb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5624 |
vulnerable | 2026-06-08 06:56:16.690913 |
Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL
Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session
Published: 2024-08-29T08:53:06.058Z
Updated: 2024-08-29T13:40:31.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5623 |
vulnerable | 2026-06-08 06:56:16.690331 |
Untrusted search path vulnerability in B&R APROL
An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.
Published: 2024-08-29T08:51:26.052Z
Updated: 2024-08-29T13:46:16.304Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5622 |
vulnerable | 2026-06-08 06:56:16.689850 |
Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL
An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges.
Published: 2024-08-29T08:49:48.300Z
Updated: 2024-08-29T13:29:24.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43765 |
vulnerable | 2026-06-08 05:49:33.991874 |
DoS in APROLs Tbase server
HIGH (7.5)
B&R APROL versions < R 4.2-07 doesn’t process correctly specially
formatted data packages sent to port 55502/tcp, which may allow a network based
attacker to cause an application Denial-of-Service.
Published: 2023-02-08T10:17:07.894Z
Updated: 2025-03-25T13:58:06.196Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43764 |
vulnerable | 2026-06-08 05:49:33.991305 |
Buffer overflow when changing configuration on Tbase Server
CRITICAL (9.8)
Insufficient validation of input parameters when
changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer
overflow. This may lead to Denial-of-Service conditions or execution of
arbitrary code.
Published: 2023-02-08T10:12:50.627Z
Updated: 2025-03-25T13:58:51.605Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43763 |
vulnerable | 2026-06-08 05:49:33.990843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43762 |
vulnerable | 2026-06-08 05:49:33.990248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43761 |
vulnerable | 2026-06-08 05:49:33.989748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19878 |
vulnerable | 2026-06-08 05:13:23.909380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19877 |
vulnerable | 2026-06-08 05:13:23.909105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19876 |
vulnerable | 2026-06-08 05:13:23.908733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19875 |
vulnerable | 2026-06-08 05:13:23.908359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19874 |
vulnerable | 2026-06-08 05:13:23.908023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19873 |
vulnerable | 2026-06-08 05:13:23.907654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19872 |
vulnerable | 2026-06-08 05:13:23.907148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19869 |
vulnerable | 2026-06-08 05:13:23.906771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.