Missing Authentication Vulnerability in ABB AbilityTM zenon Products
CVE-2025-8754

8.7HIGH

Key Information:

Vendor

Abb

Status
Abb Abilitytm Zenon
Vendor
CVE Published:
13 August 2025

What is CVE-2025-8754?

A critical security flaw has been identified in the ABB AbilityTM zenon product line, which allows unauthorized users to gain access to essential functions due to insufficient authentication mechanisms. This vulnerability potentially exposes systems to various attacks, emphasizing the need for robust security measures and timely updates across all affected versions of ABB AbilityTM zenon, from versions 7.50 through 14.

Affected Version(s)

ABB AbilityTM zenon 7.50 <= 14

References

https://search.abb.com/library/Download.aspx?DocumentID=2...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-8754 : Missing Authentication Vulnerability in ABB AbilityTM zenon Products