CVE-2025-9574 — CRITICAL (10.0)

Vulnerability Description

Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects . All firmware versions with the Serial Number from 2000 to 5166

CVSS Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Related Weaknesses (CWE)

CWE-306

References

https://search.abb.com/library/Download.aspx?DocumentID=4TZ00000006007&LanguageC

FAQ

What is CVE-2025-9574?

CVE-2025-9574 is a vulnerability with a CVSS score of 10.0 (CRITICAL). Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects . All firmware versions with the Serial Number from 2000 to 5166

How severe is CVE-2025-9574?

CVE-2025-9574 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-9574?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.