10.0 CriticalCWE-413
CVE-2025-3450
Automation Runtime SDM requests may impact system
B&R Industrial AutomationAutomation Runtime
Status
- Not in CISA KEV
- Fixed in version 6.3
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 20% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions.
Coverage 1 article · 1 outlet
- ABB B&R Automation SDM Flaw CVE-2025-3450 Allows Remote DoSCISA · first in our coverage · official notice