B&R Industrial Automation GmbH APROL vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Latest B&R Industrial Automation GmbH APROL vulnerabilities

CVE-2026-6901 — Untrusted Search Path (CVSS 7.7)
CVE-2026-6900 — Improper Certificate Validation (CVSS 7.4)
CVE-2024-10210 — Path traversal in APROL Web Portal (CVSS 8.4)
CVE-2024-8314 — Improper session handling in B&R APROL (CVSS 5.5)
CVE-2024-8313 — Default or Guessable SNMP community names in B&R APROL (CVSS 8.7)
CVE-2024-45484 — Enabled ICMP redirection in B&R APROL (CVSS 7.2)
CVE-2024-45483 — Missing GRUB password in B&R APROL (CVSS 7.0)
CVE-2024-10209 — Incorrect Permission Assignment in APROL file system (CVSS 8.5)
CVE-2024-10208 — Cross Site Scripting vulnerability in APROL Web Portal (CVSS 5.1)
CVE-2024-10207 — Server-Side Request Forgery (authenticated) in APROL Web Portal (CVSS 5.3)
CVE-2024-10206 — Server-Side Request Forgery (unauthenticated) in APROL Web Portal (CVSS 6.9)