Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: B&R Industrial Automation Automation Runtime 6.4 Clear all filters
TI-2025-03029 CVE-2025-3449 · GHSA-6rgw-qfm8-jfvg

Weak Session Token used in Automation Runtime SDM

Priority LOW 11

A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established ses…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.0019 Published 2025-10-07 Fixed in 6.4 CWE-340
TI-2025-03028 CVE-2025-3448 · GHSA-w6pp-7rxr-7pg5

Cross-site scripting in B&R Industrial Automation Automation Runtime

Priority LOW 23

Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the cont…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0026 Published 2025-10-07 Fixed in 6.4 CWE-79