Skip to content
OpenAdvisories
Critical ICSA-25-296-02 1 CVE

ASKI Energy ALS-Mini-S8 and ALS-Mini-S4

Published Oct 23, 2025 · Updated Oct 23, 2025

Vendor: ASKI Energy Product: ALS-mini-s4 IP (serial number from 2000 to 5166) Product: ALS-mini-s8 IP (serial number from 2000 to 5166)

Summary

Successful exploitation of this vulnerability could allow an attacker to gain full control over the device.

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-9574

    Missing Authentication Vulnerability

    Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects .  All firmware versions with the Serial Number from 2000 to 5166

    ABB ALS-mini-s4 IP ALS-mini-s8 IP ICS / OT

Revision history

  1. #1

    Initial Publication

References