VULNERABILITY INTELLIGENCE
CVE-2025-3449
CVSS score4.2 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-10-07
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.
Weakness classification
- cybersecurity@ch.abb.com: CWE-340