SSRF in B&r Industrial Automation Gmbh Aprol
CVE-2024-10206
A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to force the web server to request arbitrary URLs.
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (31.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 31st percentile — 31.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: +0.000
Affected products
- B&r Industrial Automation Gmbh Aprol — versions 4.4-00