Industrial Automation Aprol

industrial_automation_aprol

Vendor: Br Automation • 16 CVEs

CVEs (16)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-5624 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Aug 29, 2024 5.1 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session
CVE-2024-5623 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Aug 29, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.
CVE-2024-5622 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Aug 29, 2024 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges.
CVE-2022-43765 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Feb 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service.
CVE-2022-43764 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Feb 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbi...Show more Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code. Show less
CVE-2022-43763 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Feb 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions < R 4.2-07.
CVE-2022-43762 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Feb 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
CVE-2022-43761 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Feb 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system configuration.
CVE-2019-19878 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358.
CVE-2019-19877 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a di...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357.Show less
CVE-2019-19876 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006.
CVE-2019-19875 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root p...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364.Show less
CVE-2019-19874 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerab...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364.Show less
CVE-2019-19873 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CV...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983.Show less
CVE-2019-19872 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerabilit...Show more An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364.Show less
CVE-2019-19869 1Br Automation 1Industrial Automation Aprol Jun 17, 2026 Nov 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed (unencrypted) by using the IosHttp service and the JSON interface.