Security Advisory

CVE-2025-11498

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-14 12:42:59

Last updated 2025-10-14 15:31:36

Assigner ABB

State PUBLISHED

Description

An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attacker to create a malicious link. The user would need to click on this link, after which the resulting CSV file addi-tionally needs to be manually opened.

← Browse all CVEs View on cve.org ↗