High severity7.8NVD Advisory· Published Aug 29, 2024· Updated Jun 17, 2026

CVE-2024-5622

Description

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges.

Affected products

B&R Industrial Automation/Industrial Automation Aprol
cpe:2.3:a:br-automation:industrial_automation_aprol:*:*:*:*:*:*:*:*
Range: <=r4.2-07p3
B&R Industrial Automation/APROLllm-create2 versions
<= R 4.2.-07P3, <= R 4.4-00P3+ 1 more
- (no CPE)range: <= R 4.2.-07P3, <= R 4.4-00P3
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.br-automation.com/fileadmin/SA24P2014_Multiple_vulnerabilities_in_BR_APROL.pdf-367290ae.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000