CVE-2022-43764: Br-Automation Industrial Automation Aprol

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.

Affected products

• Br-Automation Industrial Automation Aprol: before r4.2-07 (fixed in r4.2-07)

Published 2023-02-08. Last modified 2026-06-17.