PT-2020-10276 · Br Automation · Industrial Automation Aprol

Published 2020-11-27 · Updated 2021-07-21 · CVE-2019-19873

Mitre

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983.

Fix

Related Identifiers

CVE-2019-19873

Affected Products

Industrial Automation Aprol

References · 5

• https://br-automation.com/downloads_br_productcatalogue/BRP44400000000000000585952/APROL_R42_A1_ReleaseNotes_001.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19873 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19873 · Vendor Advisory
• https://t.me/cibsecurity/16884 · Telegram Post
• https://t.me/cibsecurity/17429 · Telegram Post