Description
A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| B&R Industrial Automation | Automation Runtime | 6.0 – < 6.4, 4 | 6.4 |
Advisories 2
- ICSA-26-141-04 ABB B&R Automation Runtime CISA ICS & IT advisories · May 21, 2026
- SA25P003 B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM) ABB PSIRT · May 14, 2026