Vendors and CVEs › CVEs › CVE-2025-15467
CVE-2025-15467: what it is, who is affected and what to do
B&R reports OpenSSL vulnerabilities in a range of its products. An attacker who exploits them could stop a product or insert and run arbitrary code. The highest stated CVSS score is 9.8.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2025-15467 on the National Vulnerability Database · CISA’s known exploited catalog
The stories
Critical
OpenSSL flaws affect many B&R automation products and panels
B&R reports OpenSSL vulnerabilities in a range of its products. An attacker who exploits them could stop a product or insert and run arbitrary code. The highest stated CVSS score is 9.8.
Medium
OpenSSL flaws affect Festo AX OS in the CEPE product
Festo AX OS versions 25.0.1.46 and 25.9.2.4, used by the Festo CEPE and based on PLCnext, are affected by two OpenSSL flaws. Attacks involve crafted firmware, key files or signed objects.