CVE-2022-43764

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.
Configurations

Configuration 1 (hide)

cpe:2.3:a:br-automation:industrial_automation_aprol:*:*:*:*:*:*:*:*

History

07 Nov 2023, 03:54

Type Values Removed Values Added
Summary Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code. Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.

18 Feb 2023, 20:32

Type Values Removed Values Added
First Time Br-automation
Br-automation industrial Automation Aprol
CPE cpe:2.3:a:br-automation:industrial_automation_aprol:*:*:*:*:*:*:*:*
CWE CWE-787
References (MISC) https://www.br-automation.com/downloads_br_productcatalogue/assets/1674823095245-en-original-1.0.pdf - (MISC) https://www.br-automation.com/downloads_br_productcatalogue/assets/1674823095245-en-original-1.0.pdf - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8

08 Feb 2023, 11:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-02-08 11:15

Updated : 2023-12-10 14:48


NVD link : CVE-2022-43764

Mitre link : CVE-2022-43764

CVE.ORG link : CVE-2022-43764


JSON object : View

Products Affected

br-automation

  • industrial_automation_aprol
CWE
CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow