Vulnerability details
CVE-2025-4675
ABB WebPro SNMP Card PowerValueABB WebPro SNMP Card PowerValue UL
Improper implementation of Modbus protocol leading to DOS attack
CVSS 4.0
7.1High
Official description
Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.1High | 4.0 | CVEProject cvelistV5 (CNA) (ABB) | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| 6.5Medium | 3.1 | CVEProject cvelistV5 (CNA) (ABB) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| ABB | WebPro SNMP Card PowerValue | v ≤ 1.1.8.k | CVEProject cvelistV5 (CNA) |
| ABB | WebPro SNMP Card PowerValue UL | v ≤ 1.1.8.k | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-01-07
- Last updated
- 2026-01-07
- State
- Published
- Assigner (CNA)
- ABB
Exploit prediction (EPSS)
0.2%
Probability of exploitation in 30 days
10.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-754Improper Check for Unusual or Exceptional Conditions