Description
A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| B&R Industrial Automation | Automation Runtime | 6.0 – < 6.1, 4.0 | 6.1 |
| B&R Industrial Automation | mapp View | 6.0 – < 6.1, 5.0 | 6.1 |
Advisories 2
- SA25P001 Automation Runtime and mapp View Use of insecure algorithm for self-signed certificates ABB PSIRT · May 14, 2026
- ICSA-25-028-01 B&R Automation Runtime CISA ICS & IT advisories · Jan 15, 2025