← back
CVE-2022-43761

Lack of authentication when managing APROL database

CVSS 9.4 CRITICALEPSS 0.6%CWE-306
Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system configuration. 
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →