Unauthenticated Access to B&R APROL Database Configuration

Unauthenticated Access to B&R APROL Database Configuration

CVE-2022-43761 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system configuration. 

Learn more about our Web Application Penetration Testing UK.