Skip to content
OpenAdvisories
Critical 4TZ00000006007 1 CVE

ALS-mini-S4/S8 IP Missing Authentication Vulnerability and its Mitigations

Published Oct 20, 2025 · Updated Oct 23, 2025 · Revision 2

Vendor: ABB Product: ALS-mini-s4 IP Product: ALS-mini-s8 IP

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a write operation to the flash memory to alter the firmware behavior.

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-9574

    Missing Authentication Vulnerability

    Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects .  All firmware versions with the Serial Number from 2000 to 5166

    ABB ALS-mini-s4 IP ALS-mini-s8 IP ICS / OT

Revision history

  1. #2

    Updated CVSS 3.1 score

  2. #1

    Initial version.

References