Description
An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions.
Published: 2025-10-07
Score: 9.3 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 08 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Br-automation
Br-automation automation Runtime
Vendors & Products Br-automation
Br-automation automation Runtime

Wed, 08 Oct 2025 11:00:00 +0000

Type Values Removed Values Added
Description Improper Resource Locking vulnerability in B&R Industrial Automation Automation Runtime.This issue affects Automation Runtime: from 6.0 before 6.3, before Q4.93. An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions.
Title DoS Vulnerability in System Diagnostics Manager Automation Runtime SDM requests may impact system

Tue, 07 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 07 Oct 2025 18:15:00 +0000

Type Values Removed Values Added
Description Improper Resource Locking vulnerability in B&R Industrial Automation Automation Runtime.This issue affects Automation Runtime: from 6.0 before 6.3, before Q4.93.
Title DoS Vulnerability in System Diagnostics Manager
Weaknesses CWE-413
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H'}

Subscriptions

Br-automation Automation Runtime
cve-icon MITRE

Status: PUBLISHED

Assigner: ABB

Published:

Updated: 2025-10-08T10:53:31.397Z

Reserved: 2025-04-08T14:10:02.547Z

Link: CVE-2025-3450

cve-icon Vulnrichment

Updated: 2025-10-07T19:52:40.483Z

cve-icon NVD

Status : Deferred

Published: 2025-10-07T18:15:59.327

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-3450

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-10-08T13:35:13Z

Weaknesses