CVE-2025-3395

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-3395
Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://search.abb.com/library/Download.aspx?DocumentID=3ADR011407&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory Mitigation
Configurations

Configuration 1 (hide)

cpe:2.3:a:abb:automation_builder:*:*:*:*:*:*:*:*
History

28 May 2025, 18:26

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://search.abb.com/library/Download.aspx?DocumentID=3ADR011407&LanguageCode=en&DocumentPartId=&Action=Launch - () https://search.abb.com/library/Download.aspx?DocumentID=3ADR011407&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory, Mitigation
First Time Abb automation Builder
Abb
CPE cpe:2.3:a:abb:automation_builder:*:*:*:*:*:*:*:*

30 Apr 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-30 13:15

Updated : 2025-05-28 18:26

NVD link : CVE-2025-3395

Mitre link : CVE-2025-3395

JSON object : View

Products Affected

abb

  • automation_builder
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource

CWE-312

Cleartext Storage of Sensitive Information