CVE-2025-4677

MediumCVSS 6.5

Published: 07/01/2026(UTC)Updated: 14/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Summary

An insufficient session expiration vulnerability exists in ABB WebPro SNMP Card PowerValue and WebPro SNMP Card PowerValue UL. The issue affects versions through 1.1.8.K.

Risk Assessment

Insufficient session expiration may allow an attacker to reuse sessions or gain unauthorized access to the management interface. This could lead to a breach of confidentiality and integrity.

Recommendation

Update WebPro SNMP Card PowerValue software to a version later than 1.1.8.K. If no update is available, restrict network access to the management interface.

Other vulnerabilities in ABB WebPro SNMP Card PowerValue

CVE-2025-4675Medium
ABB WebPro SNMP Card PowerValue and PowerValue UL contain an improper check for unusual or exceptional conditions vulnerability. The issue affects versions through 1.1.8.K.

Original NVD description (English source)

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS