CVE-2024-10209 in APROL

Resumen

por MITRE • 2025-03-25

An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL <4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: ABB
• Reservar: 2024-10-21
• Divulgación: 2025-03-25
• Moderación: aceptado
• Artículo: VDB-300945
• CPE: listo
• CWE: CWE-732 (confirmado)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00126
• KEV: no
• Actividades: muy bajo
• Sector: Transportation, Chemical, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-10209
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-10209
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-10209/