CVE-2024-5623 — Untrusted search path vulnerability in B&R APROL

CVE-2024-5623

Untrusted search path vulnerability in B&R APROL PUBLISHED

Description (CNA)

An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.

Affected (CNA)

Vendor / product	Versions
B&R Industrial Automation / B&R APROL	affected 0 through <= R 4.4-00P3

CWE

CWE-250, CWE-267

References

https://www.br-automation.com/fileadmin/SA24P2014_Multiple_vulnerabilities_in_BR_APROL.pdf-367290ae.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.