Vendor
B&R Industrial Automation
- CVEs tracked · all time
- 5
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 0
- articles · all time
- 5
No articles in the last 45 daysThe latest: CISA, Thu 4 Jun, 16:11 UTC.See the full timeline
Products: Automation Runtime, B&R Automation Studio, PPT30 Operating System, Process Visualization Interface (PVI)
CVEs
5 CVEsCVE-2025-11482Allocation of Resources Without Limits or Throttling in the OPC-UA ServerCVSS8.7High–Not in KEV0.3%EPSS1article
CVE-2025-3450Automation Runtime SDM requests may impact systemCVSS10.0Critical–Not in KEV0.3%EPSS1article
CVE-2025-11044Vulnerability on Automation Runtime my cause DoS ConditionsCVSS8.9High–Not in KEV0.4%EPSS1article
CVE-2025-11043Improper Server Certificate Validation in Automation StudioCVSS9.1Critical–Not in KEV0.2%EPSS1article
CVE-2026-0936Insertion of Sensitive Information into LogfileCVSS5.1Medium–Not in KEV0.1%EPSS1article
- CVE-2025-11482 flaw disables B&R OPC UA server, update urgedCISA · official notice
- ABB B&R Automation SDM Flaw CVE-2025-3450 Allows Remote DoSCISA · official notice
- DoS flaw impacts ABB B&R Automation Runtime, CVE-2025-11044CISA · official notice
- CVE-2025-11043 Flaw Lets Attackers Spoof ABB B&R ServersCISA · official notice
- ABB B&R PVICISA · first in our coverage · official notice