CVE-2022-43764
08.02.2023, 11:15
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions< R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.Enginsight
Vendor | Product | Version |
---|---|---|
br-automation | industrial_automation_aprol | 𝑥 < r4.2-07 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-121 - Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.