CVE-2024-8313CWE-1188CWE-497
Default or Guessable SNMP community names in B&R APROL
High · published March 25, 2025
What it is
An Exposure of Sensitive System Information to an Unauthorized Control Sphere and Initialization of a Resource with an Insecure Default vulnerability in the SNMP component of B&R APROL <4.4-00P5 may allow an unauthenticated adjacent-based attacker to read and alter configuration using SNMP.
The record
Technical detail
- CVSS v4.0
- 8.7 · HIGH
- Vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00219 · 11.7th percentile
- Weaknesses
- CWE-1188 · Initialization of a Resource with an Insecure Default; CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
- Published
- 2025-03-25T04:29Z
EPSS history
Timeline