PT-2025-41146 · B&R Industrial Automation · B&R Automation Runtime

Published 2025-10-07 · Updated 2025-10-08 · CVE-2025-3450

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation Automation Runtime versions 6.0 through 6.3, before Q4.93

Description An improper resource locking issue exists in B&R Industrial Automation Automation Runtime. This can lead to a denial-of-service (DoS) condition. The issue allows for remote exploitation without authentication, potentially disrupting industrial operations.

Recommendations Update Automation Runtime to version Q4.93 or later. Update Automation Runtime to a version later than 6.3.

Fix

DoS

Weakness Enumeration

CWE-413

Related Identifiers

CVE-2025-3450

Affected Products

B&R Automation Runtime

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-3450 · Security Note
• https://twitter.com/0dayPublishing/status/1975628213545050393 · Twitter Post
• https://br-automation.com/fileadmin/SA25P002-f6a69e61.pdf · Note
• https://t.me/CVEtracker/34347 · Telegram Post
• https://twitter.com/offseq/status/1975849197862588725 · Twitter Post
• https://twitter.com/CVEnew/status/1975634533505531920 · Twitter Post
• https://t.me/cveNotify/137789 · Telegram Post