CVE-2019-19875 | BDVDB-2026-145206 Detail

Description#

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected (using Python scripts) via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.br-automation.com/downloads_br_productcatalogue/BRP44400000000000000585952/APROL_R42_A1_ReleaseNotes_001.pdf

Exploit#

No public exploit known

History#

Version 12020-11-27Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.