RCE in B&r Industrial Automation Aprol

CVE-2024-45480

An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APROL <4.4-00P5 may allow an unauthenticated network-based attacker to read files from the local system.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.004 (30.2th percentile) — read the EPSS interpretation.