[Control systems] ABB security advisory (AV25-670)

[MalBot]

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV25-670<br /><strong>Date: </strong>October 15, 2025</p>

Between October 7 and 14, 2025, ABB published security advisories to address vulnerabilities in the following products:

• Automation Runtime – versions prior to 6.4 and versions prior to Q4.93
• MConfig – version V1.4.9.21 and prior

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• B&R Automation Runtime DoS Vulnerability in SDM - CVE ID: CVE-2025-3450 (PDF)
• LVS MConfig Insecure memory handling - CVE ID: CVE-2025-9970
• B&R Automation Runtime Vulnerabilities in (SDM) - CVE ID: CVE-2025-3449, CVE-2025-3448, CVE-2025-11498 (PDF)
• ABB Cyber security alerts and notifications

</div>

Article Link: [Control systems] ABB security advisory (AV25-670) - Canadian Centre for Cyber Security