opc ua security

CISA on June 4, 2026 republished ABB’s advisory for CVE-2025-11482, a high-severity denial-of-service vulnerability in the OPC-UA server used by B&R PPT30 Operating System versions before 1.8.0 and in version 1.8.0 as an affected baseline now fixed by update guidance. The bug is not a Windows...

CISA republished ABB’s advisory for CVE-2025-11043 on May 5, 2026, warning that B&R Automation Studio versions before 6.5 improperly validate server certificates in OPC UA and ANSL-over-TLS client connections, enabling a network-positioned attacker to impersonate a trusted server. The bug is not...