Predictable Numbers Vulnerability in B&R Industrial Automation Products

CVE-2025-3449

What is CVE-2025-3449?

A vulnerability in B&R Industrial Automation's Automation Runtime allows for the generation of predictable numbers or identifiers. This could lead to potential security risks, as attackers might exploit these predictable values to gain unauthorized access or manipulate processes within affected versions of the software. Users should take measures to upgrade to version 6.4 or later to mitigate this risk.

References