Skip to content
OpenAdvisories
Medium 2CRT000008 1 CVE

Lite Panel Pro Vulnerability in Session Management

Published Jun 26, 2025 · Updated Jun 26, 2025

Vendor: ABB Product: Lite Panel Pro

Summary

ABB became aware of an internally discovered vulnerability in the Lite Panel Pro product listed as affected in the advisory.

An attacker with access to local network who successfully exploits the vulnerability could have unauthorized access during a limited time window.

ABB strongly advises customers to update Lite Panel Pro with latest firmware version available at official
product website.

Vulnerabilities 1

  • Medium 6.7
    CVE-2025-4407

    Application does not invalidate session after password reset

    Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1.

    ABB Lite Panel Pro ICS / OT

Revision history

  1. #1

    Initial version.

References