Medium severity · published Jul 22, 2025
CVE-2025-7705
Authentication bypass due to compatibility mode enabled by default
6.8
CVSS
0.2%
EPSS
No
On KEV
Description
: Active Debug Code vulnerability in ABB Switch Actuator 4 DU-83330, ABB Switch actuator, door/light 4 DU -83330-500.This issue affects Switch Actuator 4 DU-83330: All Versions; Switch actuator, door/light 4 DU -83330-500: All Versions.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Switch Actuator 4 DU-83330 · ABB
All Versions · source: vendor
SA
Switch actuator, door/light 4 DU -83330-500 · ABB
All Versions · source: vendor
In the news
VulnerabilityMedium
ABB Busch-Welcome 2 Wire Door Opener Actuator
View CSAF
Summary
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could gain physical, unauthorized access to a Building where the product is installed
The following versions of ABB Busch-Welcome 2 Wire Door Opener Actuator are affected:
Switch Actuator 4 DU vers:all/*
Switch actuator, door/light 4 DU vers:all/*
CVSS
Vendor
Equipment
Vulnerabilities
v3 6.8
ABB
ABB Busch-Welcome 2 Wire Door Opener Actuator
Active Debug Code
Background
Critical Infrastructure Sectors: Commercial Facilities
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Switzerland
Vulnerabilities
Expand All +
CVE-2025-7705
Authentication bypass due to compatibility mode enabled by default
View CVE Details
Affected Products
ABB Busch-Welcome 2 Wire Door Opener Actuator
Vendor: ABB
Product Version: Switch Actuator 4 DU -83330 - All Versions, Switch actuator, door/light 4 DU -83330-500 - All Versions
Product Status: known_affected
Remediations
Mitigation The following actions need to be executed on premise where the respective Busch-Welcome® System is installed: • While the Busch-Welcome® System is in operation, toggle the mode switch on the product from “Door-Open” - to “Light” – Mode, wait one second and switch back to “Door-Open” - Mode. • Restart the ...
May 28, 2026·CISA Advisories
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7705
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7705
search.abb.com
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4556&LanguageCode=en&DocumentPartId=pdf&Action=Launch&_gl=1*1sgofnl*_gcl_au*MjA0NTI4OTE1Mi4xNzUzMTgxNTA2*_ga*MTIxMTUxMzg5MS4xNzUzMTgxNTA3*_ga_46ZFBRSZNM*czE3NTMxODE1MDckbzEkZzEkdDE3NTMxODE2MDIkajYwJGwwJGgw
