[Control systems] ABB security advisory (AV25-670)

Serial number: AV25-670
Date: October 15, 2025

Between October 7 and 14, 2025, ABB published security advisories to address vulnerabilities in the following products:

• Automation Runtime – versions prior to 6.4 and versions prior to Q4.93
• MConfig – version V1.4.9.21 and prior

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• B&R Automation Runtime DoS Vulnerability in SDM - CVE ID: CVE-2025-3450 (PDF)
• LVS MConfig Insecure memory handling - CVE ID: CVE-2025-9970
• B&R Automation Runtime Vulnerabilities in (SDM) - CVE ID: CVE-2025-3449, CVE-2025-3448, CVE-2025-11498 (PDF)
• ABB Cyber security alerts and notifications