Medium severity · published Jan 7, 2026
CVE-2025-4675
Improper implementation of Modbus protocol leading to DOS attack
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
WebPro SNMP Card PowerValue · ABB
through 1.1.8.k · source: vendor
WS
WebPro SNMP Card PowerValue UL · ABB
through 1.1.8.k · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-4675
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-4675
search.abb.com
https://search.abb.com/library/Download.aspx?DocumentID=2CRT000009&LanguageCode=en&DocumentPartId=&Action=Launch
More from WebPro SNMP Card PowerValue
8.8
CVE-2025-4676
Authentication bypass by brute forcing Authentication Headers
6.5
CVE-2025-4677
Idle session timeout is not configured for multiple open ports