CVE-2025-4676 — Authentication bypass by brute forcing Authentication Headers

CVE-2025-4676

Authentication bypass by brute forcing Authentication Headers PUBLISHED

Description (CNA)

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

Affected (CNA)

Vendor / product	Versions
ABB / WebPro SNMP Card PowerValue	affected 0 through 1.1.8.k
ABB / WebPro SNMP Card PowerValue UL	affected 0 through 1.1.8.k

CWE

CWE-303

References

https://search.abb.com/library/Download.aspx?DocumentID=2CRT000009&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.