CVE-2025-3449CWE-340
CVE-2025-3449
Medium · published October 7, 2025
What it is
A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.
The record
Technical detail
- CVSS v3.1
- 4.2 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00190 · 8.2th percentile
- Weakness
- CWE-340 · Generation of Predictable Numbers or Identifiers
- Published
- 2025-10-07T23:15Z
References (1)
EPSS history
Timeline