{"id":"CVE-2022-43761","aliases":["EUVD-2022-46732","GHSA-p9q7-pf62-483h"],"status":"published","title":"Lack of authentication when managing APROL database","description":"Missing authentication when creating and\nmanaging the B\u0026R APROL database in versions \u003c R 4.2-07\n\n\n\nallows reading and changing the system configuration.","severity":{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00551,"percentile":0.46359,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2023-02-08T09:33:28Z","modified":"2026-06-17T05:07:16Z","products":[{"vendor":"b\u0026r industrial automation","product":"b\u0026r aprol"},{"vendor":"br-automation","product":"industrial_automation_aprol"}],"references":[{"url":"https://www.br-automation.com/downloads_br_productcatalogue/assets/1674823095245-en-original-1.0.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43761"},{"url":"https://github.com/advisories/GHSA-p9q7-pf62-483h"}],"sources":{"cve":[{"id":"CVE-2022-43761","title":"Lack of authentication when managing APROL database","description":"Missing authentication when creating and\nmanaging the B\u0026R APROL database in versions \u003c R 4.2-07\n\n\n\nallows reading and changing the system configuration. \n\n\n\n\n\n\n\n","status":"published","published":"2023-02-08T09:33:28.002Z","modified":"2025-03-25T13:54:18.752Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:34:25.618175Z"}],"euvd":[{"id":"EUVD-2022-46732","description":"Missing authentication when creating and\nmanaging the B\u0026R APROL database in versions \u003c R 4.2-07\n\n\n\nallows reading and changing the system configuration. \n\n\n\n\n\n\n\n","status":"published","published":"2023-02-08T09:33:28Z","modified":"2025-03-25T13:54:18Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T20:52:53.630669Z"}],"ghsa":[{"id":"GHSA-p9q7-pf62-483h","title":"Missing authentication when creating and managing the B\u0026R APROL database in versions \u003c R 4.2-07...","description":"Missing authentication when creating and managing the B\u0026R APROL database in versions \u003c R 4.2-07 allows reading and changing the system configuration.","status":"published","published":"2023-02-08T12:30:26Z","modified":"2023-02-18T21:30:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:54:10.77374Z"}],"nvd":[{"id":"CVE-2022-43761","description":"Missing authentication when creating and\nmanaging the B\u0026R APROL database in versions \u003c R 4.2-07\n\n\n\nallows reading and changing the system configuration. \n\n\n\n\n\n\n\n","status":"published","published":"2023-02-08T10:15:09.907Z","modified":"2026-06-17T05:07:16.053Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:07:36.026349Z"}]}}