CVE-2025-11044CWE-770

Vulnerability on Automation Runtime my cause DoS Conditions

High · published January 19, 2026

CVSS v4.0
8.9
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-19T15:57Z
EPSS history
Timeline
  • 19 JAN 15:57Z
    Vulnerability on Automation Runtime my cause DoS Conditions
    cvelistv5