B&R APROL SSH Server Vulnerability Allowing Local Command Execution

A vulnerability has been identified in the SSH server of B&R APROL versions prior to 4.4-00P1. This vulnerability allows an authenticated local attacker from a trusted remote server to execute malicious commands, due to an inclusion of functionality from an untrusted control sphere.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution on the affected system.

Remediation

Users are advised to upgrade to B&R APROL version 4.4-01 or version 4.4-00P5. After applying the update, it is recommended to change all passwords and secrets, as some vulnerabilities could have compromised credential confidentiality.