VULNERABILITY INTELLIGENCE
CVE-2025-11044
CVSS score6.8 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2026-01-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Description
An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.
Weakness classification
- cybersecurity@ch.abb.com: CWE-770