PT-2025-12732 · B&R · B&R Aprol

Published 2025-03-25 · Updated 2025-03-25 · CVE-2024-45484

Positive Technologies (AI Summary)

CVSS v4.0

7.2

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5

Description The issue is related to an Allocation of Resources Without Limits or Throttling vulnerability in the operating system network configuration. This vulnerability may allow an unauthenticated adjacent attacker to perform Denial-of-Service (DoS) attacks against the product.

Recommendations For versions prior to 4.4-00P5, update to version 4.4-00P5 or later to resolve the issue.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2024-45484

Affected Products

B&R Aprol

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-45484 · Security Note
• https://t.me/cvedetector/21043 · Telegram Post
• https://t.me/cvetracker/19836 · Telegram Post
• https://twitter.com/CVEnew/status/1904401868266066118 · Twitter Post
• https://br-automation.com/fileadmin/SA24P015-77573c08.pdf · Note