CVE-2024-45484 Overview
CVE-2024-45484 is a resource allocation vulnerability affecting B&R APROL versions prior to 4.4-00P5. The flaw exists in the operating system network configuration used by the product. An unauthenticated attacker with adjacent network access can exhaust system resources and trigger a Denial-of-Service (DoS) condition against the process control system. The weakness is classified under CWE-770: Allocation of Resources Without Limits or Throttling.
Critical Impact
An adjacent network attacker without credentials can disrupt availability of B&R APROL process control deployments, affecting industrial operations that depend on the platform.
Affected Products
- B&R APROL versions prior to 4.4-00P5
- Operating system network configuration component shipped with APROL
- Industrial process control deployments using vulnerable APROL releases
Discovery Timeline
- 2025-03-25 - CVE-2024-45484 published to NVD
- 2026-06-17 - Last updated in NVD database
Technical Details for CVE-2024-45484
Vulnerability Analysis
The vulnerability resides in the operating system network configuration used by B&R APROL. The component fails to impose limits or throttling on resource allocation when processing network input. An adjacent attacker can send crafted traffic to consume memory, connection state, or other finite resources until the service becomes unresponsive.
Because APROL is deployed as an industrial process control platform, availability loss can translate directly into operational downtime. The attacker requires no authentication and no user interaction to trigger the condition.
Root Cause
The root cause is missing enforcement of resource ceilings on network-facing operations, tracked as CWE-770. The affected code path accepts network requests and allocates resources without validating aggregate consumption against a bounded quota. Sustained input drives the process or host into an exhausted state.
Attack Vector
The attack requires adjacent network positioning, meaning the attacker must reside on the same logical network segment as the target APROL system. From that position, the adversary transmits traffic designed to expand the resource footprint of the network configuration component. No credentials, privileges, or user interaction are required. Successful exploitation degrades or halts APROL services, denying availability to legitimate operators. Refer to the B&R Automation security advisory SA24P015 for vendor technical detail.
Detection Methods for CVE-2024-45484
Indicators of Compromise
- Sudden growth in network connection counts, socket handles, or memory usage on APROL hosts without a matching operational cause
- Loss of responsiveness or watchdog-triggered restarts of APROL services on affected versions
- Repetitive or malformed traffic from a single adjacent host directed at APROL network services
Detection Strategies
- Baseline normal resource utilization for APROL hosts and alert on sustained deviations in memory, CPU, or connection tables
- Inspect network flow telemetry for unusual burst patterns originating from within the control network segment
- Correlate APROL service restarts and host health events with concurrent network anomalies
Monitoring Recommendations
- Deploy network intrusion detection sensors on the OT segment hosting APROL to identify volumetric or malformed traffic
- Forward APROL host metrics and service logs to a centralized analytics platform for cross-source correlation
- Track version inventory for APROL installations to confirm patched releases are deployed across the fleet
How to Mitigate CVE-2024-45484
Immediate Actions Required
- Identify all APROL installations running versions earlier than 4.4-00P5 and prioritize them for patching
- Restrict network reachability to APROL hosts using firewall rules and VLAN segmentation so only trusted operators can reach management interfaces
- Monitor adjacent network segments for unauthorized devices that could serve as an attack foothold
Patch Information
B&R Automation addressed the vulnerability in APROL version 4.4-00P5. Upgrade affected systems to that release or later. Consult the B&R Automation security advisory SA24P015 for upgrade procedures and version specifics.
Workarounds
- Enforce strict network segmentation between the APROL control network and general enterprise or plant networks
- Apply access control lists to limit which adjacent hosts can reach APROL network services until patching is complete
- Deploy rate limiting or traffic filtering at network chokepoints protecting APROL infrastructure
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
