An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006.
References
Link | Resource |
---|---|
https://www.br-automation.com/downloads_br_productcatalogue/BRP44400000000000000585952/APROL_R42_A1_ReleaseNotes_001.pdf | Vendor Advisory |
Configurations
Information
Published : 2020-11-27 09:15
Updated : 2020-11-30 09:28
NVD link : CVE-2019-19876
Mitre link : CVE-2019-19876
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
br-automation
- industrial_automation_aprol