CVE-2025-10571CWE-288

CVE-2025-10571

Critical · published November 21, 2025

CVSS v3.1
9.6
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

🚨 An alternate path is all it takes for an attacker to slip past authentication in ABB Ability Edgenius! 🔥 Think of it like a restaurant with a secret backdoor that lets in anyone without checking their reservation — it’s wildly convenient for intruders but completely compromising for the establishment's security! If exploited, an attacker could gain unauthorized access to sensitive systems, potentially controlling critical operational environments. This could lead to devastating data breaches, operational disruptions, or even manipulation of industrial processes.

Put simply

Think of it like a restaurant with a secret backdoor that lets in anyone without checking their reservation — it’s wildly convenient for intruders but completely compromising for the establishment's security! This vulnerability allows attackers to bypass authentication using alternative paths or channels, effectively letting them into the system without proper credentials.

What to do

If exploited, an attacker could gain unauthorized access to sensitive systems, potentially controlling critical operational environments. This could lead to devastating data breaches, operational disruptions, or even manipulation of industrial processes. Immediate action is crucial! Update ABB Ability Edgenius to version 3.2.1.2 or later to address this vulnerability. Additionally, review your access controls and monitor system logs for any suspicious activities. You've got this! Take these steps, and you'll be on your way to securing your systems like a pro. 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.6th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-11-21T00:16Z
References (1)
EPSS history
Timeline
  • 20 NOV 18:06Z
    ABB Ability Edgenius Authentication Bypass
    cvelistv5