Vendor

B&R

1 brief RSS

ABB B&R Automation Runtime Multiple Vulnerabilities

ABB B&R Automation Runtime versions before 6.4 are vulnerable to predictable number generation (CVE-2025-3449), reflected XSS (CVE-2025-3448), and CSV injection (CVE-2025-11498), potentially allowing attackers to hijack sessions or execute arbitrary code in a user's browser context.

Automation Runtime ics xss session hijacking csv injection cve-2025-3449 cve-2025-3448 cve-2025-11498

2r 1t 3c 1h ago