---
cve: "CVE-2025-11043"
severity: "CRITICAL"
cvss: 9.1
epss: "0.2%"
vendor: "B&R Industrial Automation GmbH"
kev: false
exploited: false
published: "2026-01-19 16:15:52"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-23T18:01:39+02:00"
---

# CVE-2025-11043

> 9.1 CRITICAL

## Beschreibung

An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.

## CNA-Record (Kanon, cvelistV5)

- CNA: **ABB**
- State: PUBLISHED
- Stand: 2026-01-20 20:06:44
- CNA-CVSS: **9.1** (`CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **no**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Schwachstellen-Klasse

- **CWE-295** — Improper Certificate Validation
  The product does not validate, or incorrectly validates, a certificate.

## Angriffsmuster (CAPEC)

- [CAPEC-459 — Creating a Rogue Certification Authority Certificate](https://capec.mitre.org/data/definitions/459.html) _(Severity: Very High)_
- [CAPEC-475 — Signature Spoofing by Improper Validation](https://capec.mitre.org/data/definitions/475.html) _(Severity: High)_

## Referenzen

- <https://www.br-automation.com/fileadmin/SA25P004-4f45197f.pdf>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2025-11043/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_