CVE-2024-45481

An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B&R APROL <4.4-00P5 may allow an authenticated local attacker to authenticate as another legitimate user.

Score

CVSS 4.0 8.5 High

Status

Deferred - cybersecurity@ch.abb.com

Published

2025-03-25

Last modified

2025-03-25

Weaknesses

CWE-791

Affected products

• Br Aprol (Br Industrial Automation)

References

• https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf