VulnSocial

CVE-2025-11043General

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-05); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-05: 1Mentions · 2026-05-06: 1Patch / Workaround · 2026-05-06: 1Technical Details · 2026-05-05: 1Technical Details · 2026-05-06: 105-0505-06
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-051
General1
2026-05-061
Patch1
Full discourse2 posts
  • Kernyx64@kernyx64
    Patch

    19/01/2026 🚨 A vulnerability (CVE-2025-11043) in ABB B&R Automation Studio versions <6.5 allows attackers to spoof trusted servers, risking data interception. Admins must urgently update to version 6.5 to mitigate this risk. https://www.cisa.gov/news-events/ics-advisories/icsa-26-125-04

    Post summary

    CVE-2025-11043 enables spoofing of trusted servers in ABB B&R Automation Studio <6.5, posing data interception risks; administrators are urged to upgrade to version 6.5.

    00000778
    26 followersView on X
  • WindowsForum@windowsforum
    General

    🚨 Industrial OPC UA “trust plumbing” bug (CVE-2025-11043)… because nothing screams secure like certificate validation that can be tricked. OT attackers love this quiet access. #Windows #Security https://windowsforum.com/threads/cve-2025-11043-abb-automation-studio-certificate-validation-flaw-and-ot-trust-risk.416612/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #IndustrialPatching #OtCybersecurity #OpcUaSecurity https://t.co/HRPuUaEWw1

    Post summary

    The tweet announces a newly disclosed OPC UA certificate validation flaw (CVE‑2025‑11043) and notes its potential to let attackers spoof certificates, but it provides no evidence of active exploitation, a PoC, or an available patch.

    00000936
    1.1K followersView on X

Explore more

Back to dashboard