9.1 CriticalCWE-295
CVE-2025-11043
Improper Server Certificate Validation in Automation Studio
B&R Industrial Automation GmbHB&R Automation Studio
Status
- Not in CISA KEV
- Fixed in version 6.5
Exploit probabilityEPSSchecked 25 Oct
0.2%probability of exploitation in the next 30 days
Higher than 14% of scored CVEs
SeverityCVSS
9.1Critical
Description NVD
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.
Coverage 1 article · 1 outlet
- CVE-2025-11043 Flaw Lets Attackers Spoof ABB B&R ServersCISA · first in our coverage · official notice