Plan ahead Critical Patch available CVSS up to 9.8
OpenSSL flaws affect many B&R automation products and panels
ABB PSIRTB&R Industrial Automation GmbH, B&R · manufacturingCVE-2025-11187, CVE-2025-15467
What happened. B&R reports OpenSSL vulnerabilities in a range of its products. An attacker who exploits them could stop a product or insert and run arbitrary code. The highest stated CVSS score is 9.8.
Who is affected. Users of B&R mapp View, B&R Live Utils, B&R Linux 12, PPC, PPT and PFT panels, Terminal OS, PVI and ADI OPC UA Server below the listed versions.
What to do. Check whether you run the listed B&R products below the fixed versions, and apply the vendor updates described in the advisory.
When to act. Plan ahead: Operators of listed B&R products: schedule patches before the next maintenance window; stated CVSS is 9.8.
Editor's reading
Forasset ownerOT security leadvendor/integrator
- Purdue level
- L2
- L1
Why: The list includes operator panels (PPC, PPT, PFT), mapp View and OPC UA server software, which sit at the HMI and control level (L2 and L1).
- Are you exposed?
Check your asset inventory for the listed B&R products and compare versions with the thresholds, for example PPC80 below 1.8.2 or mapp View below 6.6.0.
- If you cannot fix it yet
- Segment affected B&R panels and servers behind a firewall and allow only known engineering and operator hosts.
- Block access to these devices from the corporate network and internet.
- Disable unused network services on the affected panels and Linux systems.
- Watch for
- Unexpected restarts or stops of B&R panels, mapp View or OPC UA services.
- Unusual TLS connections or new connections to these devices from unknown hosts.
- ATT&CK for ICS
- T0866Exploitation of Remote ServicesT0881Service Stop
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: ABB PSIRT (opens br-cws-assets.de-fra-1.linodeobjects.com)