Skip to main content

SNMP CVE-2025-4677

MEDIUM
Insufficient Session Expiration (CWE-613)
2026-01-07 cybersecurity@ch.abb.com
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 07, 2026 - 18:15 nvd
MEDIUM 6.5

DescriptionCVE.org

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

AnalysisAI

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K. [CVSS 6.5 MEDIUM]

Technical ContextAI

Classified as CWE-613 (Insufficient Session Expiration). Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

Affected ProductsAI

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Ca

RemediationAI

Monitor vendor advisories for a patch.

More in SNMP

View all
CVE-2026-28775 CRITICAL POC
9.8 Mar 04

Hardcoded/insecure credentials in IDC SFX Series SuperFlex Satellite Receiver. Multiple accounts with known credentials

CVE-2019-25298 CRITICAL POC
9.1 Feb 06

html5_snmp 1.11 has multiple SQL injection vulnerabilities allowing attackers to manipulate SNMP monitoring database que

CVE-2026-26988 CRITICAL POC
9.1 Feb 20

SQL injection in LibreNMS 25.12.0 and below. PoC and patch available.

CVE-2026-26990 HIGH POC
8.8 Feb 20

SQL injection in LibreNMS versions 25.12.0 and below allows authenticated users to extract sensitive database informatio

CVE-2021-47894 HIGH POC
7.5 Jan 23

Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows attackers to crash the ap

CVE-2019-25294 MEDIUM POC
6.1 Feb 06

html5_snmp 1.11 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scrip

CVE-2026-26987 MEDIUM POC
6.1 Feb 20

Reflected cross-site scripting in LibreNMS versions 25.12.0 and earlier allows unauthenticated remote attackers to injec

CVE-2026-26992 MEDIUM POC
4.8 Feb 20

Stored XSS in LibreNMS versions 26.1.1 and below allows authenticated administrators to inject malicious scripts through

CVE-2026-26991 MEDIUM POC
4.8 Feb 20

Stored XSS in LibreNMS versions 26.1.1 and below allows authenticated administrators to inject malicious scripts through

CVE-2025-4676 HIGH
8.8 Jan 07

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP C

CVE-2026-26989 MEDIUM POC
4.3 Feb 20

Stored XSS in LibreNMS Alert Rules allows authenticated administrators to inject malicious scripts that execute when oth

CVE-2026-20048 HIGH
7.7 Feb 25

Improper SNMP request parsing in Cisco Nexus 9000 Series switches running ACI mode allows authenticated remote attackers

Share

CVE-2025-4677 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy