Back to Database
Status published
Critical
CVE-2025-11043
Improper Server Certificate Validation in Automation Studio
Vulnerability Description
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11043
Credits & Attribution
No credits recorded in the NVD database.
More from B&R Industrial Automation GmbH
View All →CVE-2025-3449
Weak Session Token used in Automation Runtime SDM
Low
2.3
CVE-2025-3448
XSS on SDM
Medium
5.1
CVE-2025-11498
CSV Formula Injection Vulnerability
Medium
5.3
CVE-2025-11482
Allocation of Resources Without Limits or Throttling in the OPC-UA Server
High
8.7
CVE-2025-11044
Vulnerability on Automation Runtime my cause DoS Conditions
High
8.9
Affected Vendor
B&R Industrial Automation GmbH
View all reports →Affected Software
B&R Automation Studio
Vulnerable Versions:
4, 6
Timeline
Official Publish:
January 19th, 2026
Last Modified:
January 20th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N