VulnSocial

CVE-2025-7064Disclosure

LOWCVSS 5.6 · MEDIUM

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-305

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-11); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-06-11: 2Mentions · 2026-06-23: 2Active Exploitation · 2026-06-23: 1Technical Details · 2026-06-11: 2Technical Details · 2026-06-23: 106-1106-23
Signal classification2 categories
Disclosure
375.0%
Active Exploitation
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-112
Disclosure2
2026-06-232
Active Exploitation1Disclosure1
Full discourse4 posts
  • Israel@f1tym1
    Disclosure

    CVE-2025-7064 allows local attackers to bypass ABB Freelance Security Lock via undocumented or special key combinations on modern keyboards. https://ift.tt/mLank48

    Post summary

    CVE‑2025‑7064 is disclosed as a local bypass exploit that leverages undocumented key combinations on modern keyboards to defeat ABB Freelance Security Lock, with no active exploitation or patch information provided.

    0000040
    1.0K followersView on X
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows attackers exploiting CVE-2025-7064 can bypass ABB Freelance Security Lock using undocumented key combinations, then escalate privileges and move laterally across connected systems. Runtime segmentation helps contain post-compromise activity in industrial environments. #ZeroTrust 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/icsa-26-174-05-cve-2025-7064

    Post summary

    The post details active exploitation of CVE-2025-7064, where attackers use undocumented key combinations to bypass ABB Freelance Security Lock, then elevate privileges and move laterally across industrial systems.

    0000052
    1.9K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-7064 Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP… https://www.cve.org/CVERecord?id=CVE-2025-7064 ----- Traducción: CVE-2025-7064 Byp… http://infoflow.cloud`

    Post summary

    The text announces the discovery of CVE-2025-7064, an authentication bypass vulnerability affecting multiple releases of ABB Freelance, and provides links to official CVE references.

    0000053
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-7064 Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP… https://www.cve.org/CVERecord?id=CVE-2025-7064

    Post summary

    The post announces CVE-2025-7064, an authentication bypass vulnerability affecting several ABB Freelance versions, and links to the CVE record, but offers no further technical detail or evidence of exploitation.

    00000196
    57.6K followersView on X

Explore more

Back to dashboard