CVE-2025-10571 CRITICAL

CVE-2025-10571: ABB Ability Edgenius Authentication Bypass

Vendor Abb
Product ABB Ability Edgenius
Weakness CWE-288
Published November 20, 2025
Last update November 21, 2025
View on NVD All CVEs

CVSS base score

9.4/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1.

Key dates

02Disclosure timeline

November 20, 2025 CVE published
November 21, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-4797 Golo <= 1.7.0 - Authentication Bypass to Account Takeover CVE-2026-8697 Improper Authentication Rate Limiting on TP-Link's Archer C64 CVE-2025-54713 WordPress Taxi Booking Manager for WooCommerce plugin <= 1.3.0 - Broken Authentication vulnerability CVE-2024-8277 WooCommerce Photo Reviews Premium <= 1.3.13.2 - Authentication Bypass to Account Takeover and Privilege Escalation CVE-2024-4544 Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication Bypass