Lucene search
HistoryAug 29, 2024 - 11:15 a.m.
CVE-2024-5623
vulnerability
b&r aprol
authenticated
local attacker
arbitrary code
privileges
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.
Affected configurations
Node
br-automationindustrial_automation_aprolRange≤r4.4-00p3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| br-automation | industrial_automation_aprol | * | cpe:2.3:a:br-automation:industrial_automation_aprol:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-5623 Untrusted search path vulnerability in B&R APROL
2024-08-29 08:51:26
vulnrichment
vulnrichment
CVE-2024-5623 Untrusted search path vulnerability in B&R APROL
2024-08-29 08:51:26
cve
cve
CVE-2024-5623
2024-08-29 11:15:27
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-5623