Skip to content
OpenAdvisories
High 4TZ00000006008 1 CVE

LVS MConfig Insecure memory handling

Published Oct 8, 2025 · Updated Oct 8, 2025

Vendor: ABB Product: MConfig

Summary

ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as affected in the advisory.

An attacker with access to local networks who successfully exploits vulnerability could have access to application’s sensitive information.

ABB strongly advises customers to update MConfig with latest software version.

Vulnerabilities 1

  • High 7.4
    CVE-2025-9970

    Application credential stored in clear text in memory

    Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.

    ABB MConfig ICS / OT

Revision history

  1. #1.0.0

    Initial version.

References