medium6.1
CVE-2025-3448
Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a rem…
Impact
Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B&R Automation | B&R Automation Runtime | before 6.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.