NVD disclosure day

Published threat advisories for October 7, 2025

CVE-2025-3450

B&R Automation Runtime SDM Improper Resource Locking Denial of Service

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

An Improper Resource Locking vulnerability in the B&R Automation Runtime SDM component could allow an unauthenticated attacker to delete data, leading to denial of service conditions. This affects industrial automation systems, and its relevance should be confirmed.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2025-0603

Callvision Emergency Code SQL Injection Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An SQL injection vulnerability exists in Callvision Emergency Code that could allow attackers to manipulate database queries, potentially leading to unauthorized access or modification of sensitive data. The healthcare emergency code system is often network-accessible, making it a potential target. The primary concern

NVD modified: NVD date unavailable