CVE-2025-4676
Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:H/SI:H/SA:H
- EPSS probability
- 0.27%
- CWE
- CWE-303
- Published
- 2026-01-07
- Last modified
- 2026-03-13
Affected products
- ABB WebPro SNMP Card PowerValue
- ABB WebPro SNMP Card PowerValue UL
Weakness type
Related vulnerabilities
- CVE-2026-78629 — Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling
- CVE-2026-9854 — A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools...
- CVE-2026-9853 — A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the...
- CVE-2026-49467 — TOTP enrollment hijack: password gate skipped due to unawaited promise
- CVE-2026-66411 — DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket...
- CVE-2026-11430 — Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit
- CVE-2026-10050 — Digest authentication lossy encoding
- CVE-2026-59309 — vCenter authentication-bypass vulnerability