QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-11044

Back to search

CVE-2025-11044

Published: Jan 19, 2026

Modified: Jan 20, 2026

PUBLISHED

CVSS v3.1

6.8

MEDIUM

Description

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.

VendorProductVersions

B&R Industrial Automation GmbH

Automation Runtime

affected
4 - < R4.93
affected
6 - < 6.5

Weaknesses (CWE)

CWE-770

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now