Threat Intelligence / CVE / CVE-2025-8754

CVE-2025-8754

CVSS 7.5 (HIGH) · EPSS 0.1% · Published 2025-08-13

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-306

Threats tracking this CVE

ABB Ability zenon Remote Transport Service CVE-2025-8754 — Missing Authentication Allows Unauthorized Remote Reboot of OT Systems — HIGH

References

https://search.abb.com/library/Download.aspx?DocumentID=2NGA002743&LanguageCode=en&DocumentPartId=&Action=Launch

Full detection coverage & IOCs for threats exploiting CVE-2025-8754 are available via the Threadlinqs MCP server (Purple tier). View plans →

Markdown version · Threadlinqs Intelligence