CVE-2025-11043: B&r Industrial Automation GmbH B&r Automation Studio

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.

Affected products

• B&r Industrial Automation GmbH B&r Automation Studio: version 4 only; from 6, before 6.5 (fixed in 6.5)

Published 2026-01-19. Last modified 2026-06-17.