Skip to main content

SNMP CVE-2025-4676

HIGH
Incorrect Implementation of Authentication Algorithm (CWE-303)
2026-01-07 cybersecurity@ch.abb.com
8.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 07, 2026 - 17:16 nvd
HIGH 8.8

DescriptionCVE.org

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

AnalysisAI

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K. [CVSS 8.8 HIGH]

Technical ContextAI

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

Affected ProductsAI

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue a

RemediationAI

Monitor vendor advisories for a patch.

More in SNMP

View all
CVE-2026-28775 CRITICAL POC
9.8 Mar 04

Hardcoded/insecure credentials in IDC SFX Series SuperFlex Satellite Receiver. Multiple accounts with known credentials

CVE-2019-25298 CRITICAL POC
9.1 Feb 06

html5_snmp 1.11 has multiple SQL injection vulnerabilities allowing attackers to manipulate SNMP monitoring database que

CVE-2026-26988 CRITICAL POC
9.1 Feb 20

SQL injection in LibreNMS 25.12.0 and below. PoC and patch available.

CVE-2026-26990 HIGH POC
8.8 Feb 20

SQL injection in LibreNMS versions 25.12.0 and below allows authenticated users to extract sensitive database informatio

CVE-2021-47894 HIGH POC
7.5 Jan 23

Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows attackers to crash the ap

CVE-2019-25294 MEDIUM POC
6.1 Feb 06

html5_snmp 1.11 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scrip

CVE-2026-26987 MEDIUM POC
6.1 Feb 20

Reflected cross-site scripting in LibreNMS versions 25.12.0 and earlier allows unauthenticated remote attackers to injec

CVE-2026-26992 MEDIUM POC
4.8 Feb 20

Stored XSS in LibreNMS versions 26.1.1 and below allows authenticated administrators to inject malicious scripts through

CVE-2026-26991 MEDIUM POC
4.8 Feb 20

Stored XSS in LibreNMS versions 26.1.1 and below allows authenticated administrators to inject malicious scripts through

CVE-2026-26989 MEDIUM POC
4.3 Feb 20

Stored XSS in LibreNMS Alert Rules allows authenticated administrators to inject malicious scripts that execute when oth

CVE-2026-20048 HIGH
7.7 Feb 25

Improper SNMP request parsing in Cisco Nexus 9000 Series switches running ACI mode allows authenticated remote attackers

CVE-2025-4677 MEDIUM
6.5 Jan 07

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.Thi

Share

CVE-2025-4676 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy