CVE-2025-8754 HIGH

CVE-2025-8754: ABB AbilityTM zenon Remote Transport Vulnerability

Vendor Abb
Product ABB AbilityTM zenon
Weakness CWE-306 · Missing auth
Published August 13, 2025
Last update August 13, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14.

Key dates

02Disclosure timeline

August 13, 2025 CVE published
August 13, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-1775 Missing Authentication for Critical Function in Labkotec LID-3300IP CVE-2026-41176 Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution CVE-2026-44328 free5GC: SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating CVE-2023-5935 Missing authentication for local web interface in Arc before v1.6.0 CVE-2026-8602 Missing authentication for critical function in ScadaBR