CVE-2025-11043 — Improper Server Certificate Validation in Automation Studio
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attac…
Published: 2026-01-19 · CVSS: 9.1 · CVSS 4.0
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7