CVE-2024-45483 — Missing GRUB password in B&R APROL

CVE-2024-45483

Missing GRUB password in B&R APROL PUBLISHED

Description (CNA)

A Missing Authentication for Critical Function vulnerability in the GRUB configuration used B&R APROL <4.4-01 may allow an unauthenticated physical attacker to alter the boot configuration of the operating system.

Affected (CNA)

Vendor / product	Versions
B&R Industrial Automation GmbH / APROL	affected 4.4 before 4.4-01

CWE

CWE-306

References

https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.