Critical · published October 7, 2025
🔥 If you've got B&R Automation Runtime versions before 6.3 or Q4.93, watch out! An unauthenticated network-based attacker can delete your data without breaking a sweat! Think of it like a construction site where someone can sneak in without a badge and start tearing down walls. Without proper resource locking, this attacker can cause a catastrophic collapse, leaving your operations in shambles! An attacker could orchestrate a denial of service by deleting critical data, bringing your system to its knees. Imagine your automated machinery suddenly halted, production lines disrupted, and data lost — absolutely devastating! This could lead to extended downtime and significant operational loss.
Think of it like a construction site where someone can sneak in without a badge and start tearing down walls. Without proper resource locking, this attacker can cause a catastrophic collapse, leaving your operations in shambles! This Improper Resource Locking vulnerability allows attackers to exploit the SDM component, leading to unauthorized data deletion through network access. Essentially, the system fails to properly safeguard resources, opening the door for potential data loss.
An attacker could orchestrate a denial of service by deleting critical data, bringing your system to its knees. Imagine your automated machinery suddenly halted, production lines disrupted, and data lost — absolutely devastating! This could lead to extended downtime and significant operational loss. Immediately update your B&R Automation Runtime to version 6.3 or Q4.93 to close this vulnerability. Additionally, review your network access control policies to ensure only authenticated users can interact with your system. Don't wait too long — the longer this vulnerability exists, the greater your risk! You've got this! Follow these steps to secure your system and keep your data safe! 🛡️