Vulnerability in B&r Industrial Automation Gmbh Aprol
CVE-2024-8314
An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in the session handling used in B&R APROL <4.4-00P5 may allow an authenticated network attacker to take over a currently active user session without login credentials.
EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.
Affected products
- B&r Industrial Automation Gmbh Aprol — versions 4.4