CVE-2025-7745

mediumpriority · track · 0EPSS 0.004 · 37 %ileCHDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (37th) EPSS

CVSS 5.8 · medium

Is it mine?

10 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · abb_psirt

EPSS · scored 2026-10-24

Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedAC500 V2abb_psirt
The vulnerabilities have been resolved in the following product versions: AC500 V2 firmware version 2.5.3 (released in 2016) and later
FixedAC500 V2cisa_csaf_ot
The vulnerabilities have been resolved in the following product versions: AC500 V2 firmware version 2.5.3 (released in 2016) and later

cvss

Technical severity, 0–10. One row per scoring source.

6.9

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.5–6.9

v3.15.8mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:Nsecondary · cybersecurity@ch.abb.comexploitability 3.9 · impact 1.4

v3.15.8mediumAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15.8mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:Nsecondary · ABB PSIRT

v3.15.8mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:Nsecondary · CISA US

v4.06.9mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · cybersecurity@ch.abb.com

v4.06.9mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:Hsecondary · ENISA EU

v4.02.5lowCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-126USCWE-126USCWE-126USCWE-126US

affected products (10)

Products and version ranges known to be affected.

ABB AC500 V2≤ 2.5.2abb_psirtCH
ABB AC500 V2all versionsfixedabb_psirtCH
ABB AC-500 <2.5.3all versionscert_bundDE
ABB AC-500< 2.5.3cert_bundDE
ABB AC500 V2 2.5.3all versionsfixedcisa_csaf_otUS
ABB AC500 V2 <=2.5.2all versionscisa_csaf_otUS
ABB AC500 V2≤ 2.5.2cisa_csaf_otUS
ABB AC500 V2all versionsfixedcisa_csaf_otUS
ABB AC500 V2≤ 0 ≤2.5.2enisa_euvdEU
ABB AC500 PLC≤ 2.5.2fstec_bduRU

advisories (3)

Vendor and ecosystem advisories describing this.

3ADR011432AC500 V2 Buffer overread on Modbus protocol2025-07-23csaf · abb_psirtCH
ABB became aware of vulnerabilities in AC500 V2 listed as affected in the advisory. An attacker who successfully exploited this vulnerability could access fragments of Modbus telegrams that have been sent earlier by that PLC
WID-SEC-W-2025-1633ABB AC-500: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2025-07-23csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ABB AC-500 ausnutzen, um Informationen offenzulegen.
ICSA-26-146-02ABB AC500 V22025-07-23icsa · cisa_csaf_otUS
ABB became aware of vulnerabilities in AC500 V2 listed as affected in the advisory. An attacker who successfully exploited this vulnerability could access fragments of Modbus telegrams that have been sent earlier by that PLC

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu abb_psirt cert_bund cisa_csaf_ot NVD CVE.org MITRE

published 2025-07-24modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan