[Control systems] B&R security advisory (AV25-025)

Serial number: AV25-025
Date: January 15, 2025

On January 15, 2025, B and R published an ICS advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

• B and R Automation Runtime – versions prior to 6.
• B and R mapp View – versions prior to 6.1

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• B and R cyber security advisory - Automation Runtime and mapp View Use of insecure algorithm for self-signed certificates (PDF)
• B and R Cyber Security Advisories and Notices