CVE-2025-9574: Missing Authentication Vulnerability

Published Oct 20, 2025

Updated

Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects .

All firmware versions with the Serial Number from 2000 to 5166

Affected Software

2 affected components

ABB ALS-mini-s4 IP>=2000

ABB ALS-mini-s8 IP>=2000

Oct 20, 2025

CVE Published

via MITRE·04:56 PM

Data Sourced

via MITRE·04:56 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Feb 28, 57989

Event

via FIRST·06:21 AM

CVE-2025-9574 has a high severity rating due to the potential for unauthorized access to critical functions.

To fix CVE-2025-9574, update the firmware to the latest version provided by ABB that addresses this vulnerability.

CVE-2025-9574 affects all firmware versions of ABB ALS-mini-s4 IP and ABB ALS-mini-s8 IP with Serial Numbers from 2000 to 5166.

CVE-2025-9574 is a Missing Authentication for Critical Function vulnerability, allowing potential unauthorized operations.

Currently, there are no documented workarounds for CVE-2025-9574 other than applying the firmware update from ABB.