What is CVE-2025-9574?

CVE-2025-9574 is a critical-severity vulnerability in Abb Als-Mini-S4 Ip, classified under Missing Authentication for Critical Function. CVSS score: 10.0/10. Published 2025-10-20.

How severe is CVE-2025-9574?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Auth bypass in Abb Als-Mini-S4 Ip

CVE-2025-9574

Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects . All firmware versions with the Serial Number from 2000 to 5166

Vulnerability class: Broken Authentication

EPSS: 0.007 (51.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Abb Als-mini-s4 Ip — versions 0
Abb Als-mini-s8 Ip — versions 0

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cybersecurity@ch.abb.com

Frequently asked questions

What is CVE-2025-9574?: CVE-2025-9574 is a critical-severity vulnerability in Abb Als-Mini-S4 Ip, classified under Missing Authentication for Critical Function. CVSS score: 10.0/10. Published 2025-10-20.
How severe is CVE-2025-9574?: Critical severity. CVSS v3 base score is 10.0 out of 10.