CVE-2024-45481

Improper authentication in SSH of B&R APROL PUBLISHED

Description (CNA)

An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B&R APROL <4.4-00P5 may allow an authenticated local attacker to authenticate as another legitimate user.

Affected (CNA)

Vendor / product	Versions
B&R Industrial Automation / B&R APROL	affected R4.4 before 4.4-00P5

CWE

CWE-791

References

https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.