Skip to content
CVE PROGRAM SOURCE RECORD8.9 High

CVE-2025-11044

Vulnerability on Automation Runtime my cause DoS Conditions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

B&R Industrial Automation GmbH Automation Runtime

Default version status: unaffected

  • 4 to < R4.93affected
  • 6 to < 6.5affected

References