Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
AV25-776 CVE-2025-10571 ABB Edgenius management portal -- https://www.cisa.gov/news-events/ics-advisories/icsa-26-120-03
Post summary
The text references CVE-2025-10571 linked to ABB Edgenius management portal and provides a link to a CISA advisory, but offers no additional details on the vulnerability or its exploitation.
TRC analysis shows attackers exploiting CVE-2025-10571 in ABB Ability Edgenius can bypass authentication entirely, then escalate privileges to install arbitrary code and move laterally across networks. This edge platform compromise demonstrates how industrial systems require runtime segmentation to limit blast radius. #ZeroTrust #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/icsa-26-120-03-cve-2025-10571
Post summary
The report confirms that attackers are actively using CVE‑2025‑10571 to bypass authentication, gain full control over ABB Ability Edgenius, and move laterally, highlighting a critical need for runtime segmentation in industrial systems.