B&R APROL Code Injection Vulnerability in AprolCreateReport Component Allowing File Read

A code injection vulnerability has been identified in the AprolCreateReport component of B&R APROL versions prior to 4.4-00P5. This vulnerability allows an unauthenticated network-based attacker to read files from the local system.

Impact

Exploitation of this vulnerability could lead to unauthorized file access on the local system.

Remediation

Users are advised to upgrade to B&R APROL version 4.4-01 or version 4.4-00P5 or later. After applying the update, it is recommended to change all passwords and secrets, as some vulnerabilities may have compromised credential confidentiality.