← CVE Intelligence

CVE-2024-8313

Default or Guessable SNMP community names in B&R APROL PUBLISHED

Description (CNA)

An Exposure of Sensitive System Information to an Unauthorized Control Sphere and Initialization of a Resource with an Insecure Default vulnerability in the SNMP component of B&R APROL <4.4-00P5 may allow an unauthenticated adjacent-based attacker to read and alter configuration using SNMP.

Affected (CNA)

Vendor / productVersions
B&R Industrial Automation GmbH / APROLaffected 4.4 before 4.4-00P5

CWE

CWE-497, CWE-1188

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.