Vulnerability intelligence

CVE-2025-11044

B&R Industrial Automation GmbH Automation Runtime CWE-770

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.

CVSS Score

8.9

High

EPSS — Exploit Probability

0.3%

Riskier than 26% of all CVEs · checked 2026-09-08

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories