CVE-2025-11044
MEDIUMCVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Lifecycle Timeline
2DescriptionNVD
An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.
AnalysisAI
R Automation Runtime versions up to 6.5 is affected by allocation of resources without limits or throttling (CVSS 6.8).
Technical ContextAI
This vulnerability (CWE-770: Allocation of Resources Without Limits or Throttling) exists in the ANSL-Server component. An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service (DoS) conditions on affected devices.
Affected ProductsAI
Product: R Automation Runtime. Versions: up to 6.5. Component: ANSL-Server.
RemediationAI
Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.
Share
External POC / Exploit Code
Leaving vuln.today