Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2025-3449

Weak Session Token used in Automation Runtime SDM

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

B&R Industrial Automation GmbH Automation Runtime

Default version status: unaffected

  • 6.0 to < 6.4affected
  • 4affected

References