High severity7.8NVD Advisory· Published Aug 29, 2024· Updated Jun 17, 2026

CVE-2024-5623

Description

An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges.

Affected products

B&R Industrial Automation/Industrial Automation Aprol
cpe:2.3:a:br-automation:industrial_automation_aprol:*:*:*:*:*:*:*:*
Range: <=r4.4-00p3
B&R Industrial Automation/APROLllm-create2 versions
<= R 4.4-00P3+ 1 more
- (no CPE)range: <= R 4.4-00P3
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.br-automation.com/fileadmin/SA24P2014_Multiple_vulnerabilities_in_BR_APROL.pdf-367290ae.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000