3ADR011524 PUBLISHED CVSS 5.300000190734863 MEDIUM

ABB became aware of severe vulnerability in the products versions listed as affected in the advisory. An update is available that resolves these vulnerabilities. An attacker who successfully exploited these vulnerabilities could bypass the user management and read visualization files (CVE-2025-2595), read and write certificates and keys (CVE-2025-41659) or cause a denial-of-service (DoS) (CVE-2025-41691).

Risk Scores

CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C

Affected Products

VendorProductVersions
ABB AC500 V3 3.9.0
ABB AC500 V3 <3.9.0

Timeline

References

Open in Interactive Console →