Skip to content
OpenAdvisories
Medium ICSA-25-140-01 1 CVE

ABUP IoT Cloud Platform

Published May 20, 2025 · Updated May 20, 2025

Vendor: ABUP Product: IoT Cloud Platform

Summary

Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized.

Vulnerabilities 1

  • Medium 6.8
    CVE-2025-4692

    ABUP IoT Cloud Platform Incorrect Privilege Assignment

    Actors can use a maliciously crafted JavaScript object notation (JSON) web token (JWT) to perform privilege escalation by submitting the malicious JWT to a vulnerable method exposed on the cloud platform. If the exploit is successful, the user can escalate pr…

    ABUP ABUP IoT Cloud Platform

Revision history

  1. #1

    Initial Publication

References