Incorrect Permission Assignment in ABB Automation Builder
CVE-2025-3395

8.4HIGH

Key Information:

Vendor

Abb

Status
Automation Builder
Vendor
CVE Published:
30 April 2025

What is CVE-2025-3395?

The vulnerability in ABB Automation Builder stems from incorrect permission assignment for a critical resource, potentially allowing unauthorized access to sensitive information. This flaw impacts automation systems by exposing them to unexpected behaviors and security risks when versions up to 2.8.0 are utilized. Proper measures should be implemented to secure these systems against exploitation.

Affected Version(s)

Automation Builder 0 <= 2.8.0

References

https://search.abb.com/library/Download.aspx?DocumentID=3...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ABB acknowledges and extends gratitude to Jiho Shin from Sungkyunkwan University for responsibly disclosing the vulnerability and providing valuable input on product improvements.
.