CVE-2023-0425

highpriority · track · 30EPSS 0.005 · 41 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.47% (41st) EPSS

CVSS 7.5 · high

Is it mine?

29 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make the product inaccessible. Numeric Range Comparison Without Minimum Check vulnerability in ABB Freelance controllers AC 700F (Controller modules), ABB Freelance controllers AC 900F (controller modules).This issue affects: Freelance controllers AC 700F: from 9.0;0 through V9.2 SP2, through Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1; Freelance controllers AC 900F: Freelance 2013, through Freelance 2013SP1, through Freelance 2016, through Freelance 2016SP1, through Freelance 2019, through Freelance 2019 SP1, through Freelance 2019 SP1 FP1.

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–8.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.18.6highAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · FSTEC (BDU) RU

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · ENISA EU

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · cybersecurity@ch.abb.comexploitability 3.9 · impact 4.7

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-839USCWE-839US

affected products (29)

Products and version ranges known to be affected.

ABB Freelance controllers AC 700F≤ 0 ≤Freelance 2013enisa_euvdEU
ABB Freelance controllers AC 700F≤ 9.0;0 ≤V9.2 SP2enisa_euvdEU
ABB Freelance controllers AC 700F≤ 0 ≤Freelance 2019 SP1 FP1enisa_euvdEU
ABB Freelance controllers AC 700F≤ 0 ≤Freelance 2013SP1enisa_euvdEU
ABB Freelance controllers AC 700F≤ 0 ≤Freelance 2016SP1enisa_euvdEU
ABB Freelance controllers AC 700F≤ 0 ≤Freelance 2019enisa_euvdEU
ABB Freelance controllers AC 700F≤ 0 ≤Freelance 2019 SP1enisa_euvdEU
ABB Freelance controllers AC 700F≤ 0 ≤Freelance 2016enisa_euvdEU
ABB Freelance controllers AC 900F≤ 0 ≤Freelance 2019enisa_euvdEU
ABB Freelance controllers AC 900F≤ 0 ≤Freelance 2019 SP1 FP1enisa_euvdEU
ABB Freelance controllers AC 900F≤ 0 ≤Freelance 2016enisa_euvdEU
ABB Freelance controllers AC 900F≤ 0 ≤Freelance 2019 SP1enisa_euvdEU
ABB Freelance controllers AC 900F≤ 0 ≤Freelance 2016SP1enisa_euvdEU
ABB Freelance controllers AC 900F≤ 0 ≤Freelance 2013SP1enisa_euvdEU
ABB Freelance controllers AC 900F≤ 0 ≤Freelance 2013enisa_euvdEU
ABB AC 700F≤ 9.2.0 sp1fstec_bduRU
ABB AC 700F9.0.0 → 9.2.0fstec_bduRU
ABB Freelance 2013all versionsfstec_bduRU
ABB Freelance 2013≤ SP1fstec_bduRU
ABB Freelance 2016≤ SP1fstec_bduRU

showing 20 of 29

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2023-08-07modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan