CVE-2024-10210 | THREATINT

Description

An External Control of File Name or Path vulnerability in the APROL Web Portal used in B&R APROL <4.4-005P may allow an authenticated network-based attacker to access data from the file system.

Reserved 2024-10-21 | Published 2025-03-25 | Updated 2025-03-31 | Assigner ABB

HIGH: 8.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N

Problem types

CWE-73 External Control of File Name or Path

Product status

Default status

unaffected

4.4 before 4.4-00P5

affected

References

www.br-automation.com/fileadmin/SA24P015-77573c08.pdf

cve.org (CVE-2024-10210)

nvd.nist.gov (CVE-2024-10210)

Download JSON