Skip to content
OpenAdvisories
Medium SA25P005 1 CVE

B&R Automation Runtime Improper Handling of Flooding conditions on ANSL Server

Published Jan 19, 2026 · Updated May 14, 2026 · Revision 2

Vendor: B&R Industrial Automation Product: Automation Runtime

Summary

ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability.

An attacker who successfully exploited this vulnerability could cause the product to stop.

Vulnerabilities 1

  • Medium 6.8
    CVE-2025-11044

    Vulnerability on Automation Runtime my cause DoS Conditions

    An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, re…

    B&R Industrial Automation Automation Runtime

Revision history

  1. #2

    Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.

  2. #1

    Initial version.

References