CVE-2025-11482
BaseFortify
Publication date: 2026-05-26
Last updated on: 2026-05-26
Assigner: Asea Brown Boveri Ltd. (ABB)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| br | opc-ua_server | to 1.8.0 (exc) |
| br | ppt30_operating_system | 1.8.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-770 | The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-11482 is a vulnerability in the PPT30 Operating System versions before 1.8.0, specifically affecting the OPC-UA Server component.
The issue involves an Allocation of Resources Without Limits or Throttling, which allows an unauthenticated network-based attacker to send messages to the system node, causing the OPC-UA server to become permanently inaccessible.
A system reboot is required to restore normal operation.
The OPC-UA server is not enabled by default, reducing the risk for most users.
How can this vulnerability impact me? :
An unauthenticated network-based attacker can exploit this vulnerability to permanently prevent legitimate users from interacting with the OPC-UA server service.
This denial of service requires a system reboot to restore normal operation, potentially causing downtime and disruption of services relying on the OPC-UA server.
Since the OPC-UA server is not enabled by default, the impact is limited to systems where it is active.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability affects the OPC-UA Server component in PPT30 Operating System versions before 1.8.0. Detection involves checking if the OPC-UA server is enabled and whether it is responding normally.
Since the vulnerability causes the OPC-UA server to become permanently inaccessible until a system reboot, one way to detect it is to monitor the availability and responsiveness of the OPC-UA server.
Suggested commands or steps include:
- Check if the OPC-UA server process is running on the system.
- Use network scanning tools (e.g., nmap) to verify if the OPC-UA server port is open and responding.
- Attempt to connect to the OPC-UA server using an OPC-UA client to verify service availability.
- Monitor logs for unusual or excessive messages sent to the system node that could indicate exploitation attempts.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include updating the PPT30 Operating System to version 1.8.0 or later, as this update addresses the vulnerability.
If the OPC-UA server is enabled, customers should install the update immediately to prevent exploitation.
Additional recommended security measures are:
- Restrict access to the OPC-UA server to trusted IP addresses only.
- Configure firewalls to limit network exposure of the OPC-UA server.
- Follow general cybersecurity best practices such as network isolation, physical security, and regular software updates.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows an unauthenticated network-based attacker to cause a denial of service by making the OPC-UA server permanently inaccessible until a system reboot is performed.
While the vulnerability itself does not directly disclose or alter personal or sensitive data, the resulting denial of service could impact the availability of systems that may be subject to compliance requirements such as GDPR or HIPAA, which mandate availability and integrity of systems handling personal or health data.
Organizations relying on the affected OPC-UA server for critical operations should consider that this vulnerability could lead to service interruptions, potentially affecting compliance with availability requirements in these regulations.
Mitigation steps recommended include updating to PPT30 Operating System version 1.8.0 or later, restricting access to trusted IP addresses, configuring firewalls, and following cybersecurity best practices such as network isolation and regular software updates, which help maintain compliance by reducing risk.