PT-2020-10280

CVE-2019-19877

·

Published

2020-11-27

·

Updated

2020-12-09

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08
Description An issue was discovered that allows an attacker to access sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer.
Recommendations For versions prior to R4.2 V7.08, update to version R4.2 V7.08 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2019-19877
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com