PT-2026-3449 · Schneider Electric · Automation Studio

Published 2026-01-19 · Updated 2026-05-06 · CVE-2025-11043

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Automation Studio versions prior to 6.5

Description An Improper Certificate Validation issue exists in the OPC-UA client and ANSL over TLS client. This could allow an unauthenticated attacker on the network to intercept and interfere with data exchanges.

Recommendations Update Automation Studio to version 6.5 or later.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-11043

Affected Products

Automation Studio

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11043 · Security Note
• https://twitter.com/CVEnew/status/2013286181736165876 · Twitter Post
• https://br-automation.com/fileadmin/SA25P004-4f45197f.pdf · Note
• https://twitter.com/windowsforum/status/2051741455585001586 · Twitter Post
• https://twitter.com/kernyx64/status/2051897315342840106 · Twitter Post
• https://twitter.com/0dayPublishing/status/2013279319787749389 · Twitter Post