{"id":"CVE-2022-43764","aliases":["EUVD-2022-46735","GHSA-pmw8-p4g8-wr53"],"status":"published","title":"Buffer overflow when changing configuration on Tbase Server","description":"Insufficient validation of input parameters when\nchanging configuration on Tbase server in B\u0026R APROL versions \u003c R 4.2-07 could result in buffer\noverflow. This may lead to Denial-of-Service conditions or execution of\narbitrary code.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00776,"percentile":0.5606,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2023-02-08T10:12:50Z","modified":"2026-06-17T05:07:16Z","products":[{"vendor":"b\u0026r industrial automation","product":"b\u0026r aprol"},{"vendor":"br-automation","product":"industrial_automation_aprol"}],"references":[{"url":"https://www.br-automation.com/downloads_br_productcatalogue/assets/1674823095245-en-original-1.0.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43764"},{"url":"https://github.com/advisories/GHSA-pmw8-p4g8-wr53"}],"sources":{"cve":[{"id":"CVE-2022-43764","title":"Buffer overflow when changing configuration on Tbase Server","description":"Insufficient validation of input parameters when\nchanging configuration on Tbase server in B\u0026R APROL versions \u003c R 4.2-07 could result in buffer\noverflow. This may lead to Denial-of-Service conditions or execution of\narbitrary code.\n\n\n\n\n\n\n\n","status":"published","published":"2023-02-08T10:12:50.627Z","modified":"2025-03-25T13:58:51.605Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:34:25.308772Z"}],"euvd":[{"id":"EUVD-2022-46735","description":"Insufficient validation of input parameters when\nchanging configuration on Tbase server in B\u0026R APROL versions \u003c R 4.2-07 could result in buffer\noverflow. This may lead to Denial-of-Service conditions or execution of\narbitrary code.\n\n\n\n\n\n\n\n","status":"published","published":"2023-02-08T10:12:50Z","modified":"2025-03-25T13:58:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:53.630669Z"}],"ghsa":[{"id":"GHSA-pmw8-p4g8-wr53","title":"Insufficient validation of input parameters when changing configuration on Tbase server in B\u0026R...","description":"Insufficient validation of input parameters when changing configuration on Tbase server in B\u0026R APROL versions \u003c R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.","status":"published","published":"2023-02-08T12:30:26Z","modified":"2023-02-18T21:30:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:54:10.14247Z"}],"nvd":[{"id":"CVE-2022-43764","description":"Insufficient validation of input parameters when\nchanging configuration on Tbase server in B\u0026R APROL versions \u003c R 4.2-07 could result in buffer\noverflow. This may lead to Denial-of-Service conditions or execution of\narbitrary code.\n\n\n\n\n\n\n\n","status":"published","published":"2023-02-08T11:15:10.51Z","modified":"2026-06-17T05:07:16.453Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:07:36.026349Z"}]}}