PT-2025-47610 · Abb · Abb Ability Edgenius

Published 2025-11-20 · Updated 2026-04-30 · CVE-2025-10571

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB Ability Edgenius versions 3.2.0.0 through 3.2.1.1

Description An authentication bypass issue exists in ABB Ability Edgenius. This allows attackers to gain full control over industrial edge devices without valid credentials by exploiting an adjacent network authentication bypass. The issue involves using an alternate path or channel to circumvent normal authentication procedures.

Recommendations ABB Ability Edgenius version 3.2.0.0 should be updated. ABB Ability Edgenius version 3.2.1.1 should be updated.

Fix

RCE

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2025-14691

CVE-2025-10571

Affected Products

Abb Ability Edgenius

References · 11

• https://search.abb.com/library/Download.aspx?DocumentID=7PAA022088&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10571 · Security Note
• https://bdu.fstec.ru/vul/2025-14691 · Security Note
• https://twitter.com/CVEnew/status/1991572995165306885 · Twitter Post
• https://twitter.com/Komodosec/status/2006142061276512258 · Twitter Post
• https://twitter.com/0dayPublishing/status/1991573569755574508 · Twitter Post
• https://t.me/pentestingnews/71160 · Telegram Post
• https://twitter.com/CCBalert/status/1991897976168685664 · Twitter Post
• https://twitter.com/aviatrixtrc/status/2049903244546048340 · Twitter Post
• https://twitter.com/CveFindCom/status/1991652874158252142 · Twitter Post
• https://t.me/CVEtracker/37861 · Telegram Post