CVE-2025-11043: Improper Server Certificate Validation in Automation Studio
An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with data exchanges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11043?
CVE-2025-11043 has a critical severity level due to its potential for allowing an unauthenticated attacker to intercept sensitive data.
How do I fix CVE-2025-11043?
To fix CVE-2025-11043, upgrade to Automation Studio version 6.5 or later where the vulnerability is addressed.
Who is affected by CVE-2025-11043?
CVE-2025-11043 affects users of Schneider Electric Automation Studio versions prior to 6.5.
What is the impact of CVE-2025-11043?
The impact of CVE-2025-11043 is that attackers can intercept and potentially manipulate communications if proper certificate validation is not enforced.
What components are involved in CVE-2025-11043?
CVE-2025-11043 involves the OPC-UA client and ANSL over TLS client components of Automation Studio.