CVE-2024-10207

A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to force the web server to request arbitrary URLs.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - cybersecurity@ch.abb.com

Published

2025-03-25

Last modified

2025-03-25

Weaknesses

CWE-918

Affected products

• Aprol (Br Industrial Automation Gmbh)

References

• https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf