CVE-2024-45480

Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5

Description An improper control of generation of code, also known as 'Code Injection', in the AprolCreateReport component may allow an unauthenticated network-based attacker to read files from the local system. This issue could potentially be exploited by remote attackers.

Recommendations For versions prior to 4.4-00P5, update to version 4.4-00P5 or later to resolve the issue. As a temporary workaround, consider restricting access to the AprolCreateReport component to minimize the risk of exploitation.