SSRF in B&r Industrial Automation Gmbh Aprol
CVE-2024-10206
A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to force the web server to request arbitrary URLs.
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.004 (30.0th percentile) — read the EPSS interpretation.
Affected products
- B&r Industrial Automation Gmbh Aprol — versions 4.4-00