CVE-2024-45482

An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the SSH server on B&R APROL <4.4-00P1 may allow an authenticated local attacker from a trusted remote server to execute malicious commands.

Score

CVSS 4.0 8.5 High

Status

Deferred - cybersecurity@ch.abb.com

Published

2025-03-25

Last modified

2025-03-25

Weaknesses

CWE-829

Affected products

• Br Aprol (Br Industrial Automation)

References

• https://www.br-automation.com/fileadmin/SA24P015-77573c08.pdf