PT-2026-3450 · Br Automation · B&R Automation Runtime

Published 2026-01-19 · Updated 2026-05-05 · CVE-2025-11044

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions prior to 6.5 B&R Automation Runtime versions prior to R4.93

Description An issue exists in the ANSL-Server component that involves allocation of resources without limits or throttling. An unauthenticated attacker on the network can exploit this to win a race condition, leading to a permanent denial-of-service (DoS) condition on affected devices.

Recommendations Update B&R Automation Runtime to a version later than or equal to 6.5. Update B&R Automation Runtime to a version later than or equal to R4.93.

Fix

DoS

RCE

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-11044

Affected Products

B&R Automation Runtime

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11044 · Security Note
• https://twitter.com/VulmonFeeds/status/2013296147893195046 · Twitter Post
• https://twitter.com/CVEnew/status/2013286180792447227 · Twitter Post
• https://br-automation.com/fileadmin/SA25P005-26597bd0.pdf · Note
• https://twitter.com/windowsforum/status/2051742179299557871 · Twitter Post