CVE-2024-10209: Incorrect Permission Assignment in APROL file system
An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL <4.4-01 may allow an authenticated local attacker to read and alter the configuration of another engineering or runtime user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10209?
CVE-2024-10209 has a severity rating that indicates it poses a significant risk due to incorrect permission assignments in the file system.
How do I fix CVE-2024-10209?
To fix CVE-2024-10209, update B&R APROL to version 4.4-01 or later to address the incorrect permission assignments.
Who is affected by CVE-2024-10209?
CVE-2024-10209 affects users of B&R APROL versions prior to 4.4-01, especially those with authenticated local access.
What can an attacker do with CVE-2024-10209?
An authenticated local attacker can read and alter the configuration of other engineering or runtime users due to the incorrect permission assignment.
Is there a workaround for CVE-2024-10209?
Until a fix is applied, restricting access to the filesystem and monitoring user permissions can help mitigate risks associated with CVE-2024-10209.