CVE-2025-3449 — Weak Session Token used in Automation Runtime SDM

CVE-2025-3449

Weak Session Token used in Automation Runtime SDM PUBLISHED

Description (CNA)

A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.

Affected (CNA)

Vendor / product	Versions
B&R Industrial Automation GmbH / Automation Runtime	affected 6.0 before 6.4; affected 4

CWE

CWE-340

References

https://www.br-automation.com/fileadmin/SA25P003-178b6a20.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.