PT-2026-1809 · Abb · Abb Webpro Snmp Card Powervalue+1

Published 2026-01-07 · Updated 2026-01-07 · CVE-2025-4677

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ABB WebPro SNMP Card PowerValue versions through 1.1.8.K ABB WebPro SNMP Card PowerValue UL versions through 1.1.8.K

Description An insufficient session expiration issue exists in ABB WebPro SNMP Card PowerValue and ABB WebPro SNMP Card PowerValue UL. The vulnerability could allow unauthorized access due to prolonged session validity.

Recommendations Update ABB WebPro SNMP Card PowerValue to a version later than 1.1.8.K. Update ABB WebPro SNMP Card PowerValue UL to a version later than 1.1.8.K.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2025-4677

Affected Products

Abb Webpro Snmp Card Powervalue

Abb Webpro Snmp Card Powervalue Ul

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-4677 · Security Note
• https://twitter.com/CVEnew/status/2008959519729311760 · Twitter Post
• https://search.abb.com/library/Download.aspx?DocumentID=2CRT000009&LanguageCode=en&DocumentPartId=&Action=Launch · Note