NetSight
critical9.2

CVE-2024-45480

An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APROL <4.4-00P5 may allow an unauthenticat…

Impact

An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system.

Affected products

ProductAffected versions
B&R APROL
before 4.4-00P5

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References