Approved changes feed: RSS · Atom
cpe:2.3:a:b&r_industrial_automation:b&r_aprol:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | B&R Industrial Automation (96528465-c3bc-5a8a-9f58-0063fc26b089) |
|---|---|
| Product | B&R Aprol (424ae11f-0db0-5860-ae63-67d3b485f106) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8315 |
vulnerable | 2026-06-08 07:00:24.220906 |
Improper Handling of Insufficient Permissions or Privileges in B&R APROL
An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B&R APROL <4.4-00P5 may allow an authenticated local attacker to read credential information.
Published: 2025-03-25T04:31:27.667Z
Updated: 2025-03-25T13:22:20.976Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5624 |
vulnerable | 2026-06-08 06:56:16.690875 |
Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL
Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session
Published: 2024-08-29T08:53:06.058Z
Updated: 2024-08-29T13:40:31.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5623 |
vulnerable | 2026-06-08 06:56:16.690378 |
Untrusted search path vulnerability in B&R APROL
An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.
Published: 2024-08-29T08:51:26.052Z
Updated: 2024-08-29T13:46:16.304Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5622 |
vulnerable | 2026-06-08 06:56:16.689045 |
Untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL
An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges.
Published: 2024-08-29T08:49:48.300Z
Updated: 2024-08-29T13:29:24.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45482 |
vulnerable | 2026-06-08 06:48:06.352880 |
Privilege escalation in B&R APROL
An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the SSH server on B&R APROL <4.4-00P1 may allow an authenticated local attacker from a trusted remote server to execute malicious commands.
Published: 2025-03-25T04:52:56.296Z
Updated: 2025-03-25T14:23:53.190Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45481 |
vulnerable | 2026-06-08 06:48:06.352584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45480 |
vulnerable | 2026-06-08 06:48:06.352086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43765 |
vulnerable | 2026-06-08 05:49:33.991756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43764 |
vulnerable | 2026-06-08 05:49:33.991186 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43763 |
vulnerable | 2026-06-08 05:49:33.990806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43762 |
vulnerable | 2026-06-08 05:49:33.990204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43761 |
vulnerable | 2026-06-08 05:49:33.988678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.