Skip to content
OpenAdvisories
Medium ICSA-26-125-03 1 CVE

ABB B&R Automation Runtime

Published Jan 19, 2026 · Updated May 5, 2026 · Revision 2

Vendor: ABB Product: Automation Runtime

Summary

ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability.

An attacker who successfully exploited this vulnerability could cause the product to stop.

Vulnerabilities 1

  • Medium 6.8
    CVE-2025-11044

    Vulnerability on Automation Runtime my cause DoS Conditions

    An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, re…

    B&R Industrial Automation Automation Runtime

Revision history

  1. #2

    Initial CISA Republication of ABB PSIRT SA25P005 advisory

  2. #1

    Initial version.

References