CVE-2025-3449 — Weak Session Token used in Automation Runtime SDM
A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based at…
Published: 2025-10-07 · CVSS: 2.3 · CVSS 4.0
A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7