Vulnerability · Published Jan 19, 2026 · Assigned by ABB
CVE-2025-11043Improper Server Certificate Validation in Automation Studio
High 7.4
In plain English
A high-severity improper certificate validation in B&R Automation Studio from B&R Industrial Automation GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.2%top 85.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| B&R Industrial Automation GmbH | B&R Automation Studio | 46 – before 6.5 |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N