8.8High
CVE-2025-4676Authentication bypass by brute forcing Authentication Headers
Description
Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.
Weakness (CWE):
CWE-303
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| ABB | WebPro SNMP Card PowerValue | ≤ 1.1.8.k | |
| ABB | WebPro SNMP Card PowerValue UL | ≤ 1.1.8.k |