← CVE Intelligence

CVE-2024-45480

Unauthorized local file reading in B&R APROL PUBLISHED

Description (CNA)

An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system.

Affected (CNA)

Vendor / productVersions
B&R Industrial Automation / B&R APROLaffected R4.4 before 4.4-00P5

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.