CVE Vulnerabilities

CVE-2025-3449

Generation of Predictable Numbers or Identifiers

Published: Oct 07, 2025 | Modified: Oct 08, 2025

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Vulnerability-free packages from our partners

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-3449
CWE	https://cwe.mitre.org/data/definitions/340.html

A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.

Weakness

The product uses a scheme that generates numbers or identifiers that are more predictable than required.

References

https://www.br-automation.com/fileadmin/SA25P003-178b6a20.pdf

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.