CVE-2025-3450

Summary

An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions.

Affected Software

VendorProductVersion RangeStatus
B&R Industrial AutomationAutomation Runtime6.0 < 6.3affected
B&R Industrial AutomationAutomation Runtime4.0 < Q4.93affected

Weaknesses

  • CWE-413: CWE-413 Improper Resource Locking

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References