CVE-2024-45482 — Privilege escalation in B&R APROL

CVE-2024-45482

Privilege escalation in B&R APROL PUBLISHED

Description (CNA)

An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the SSH server on B&R APROL <4.4-00P1 may allow an authenticated local attacker from a trusted remote server to execute malicious commands.

Affected (CNA)

Vendor / product	Versions
B&R Industrial Automation / B&R APROL	affected R4.4 before 4.4-00P1

CWE

CWE-829

References

https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.