Description
Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| B&R Industrial Automation | Automation Runtime | 6.0 – < 6.4, 4 | 6.4 |
Advisories 2
- ICSA-26-141-04 ABB B&R Automation Runtime CISA ICS & IT advisories · May 21, 2026
- SA25P003 B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM) ABB PSIRT · May 14, 2026