CVE-2025-9970
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-08

Last updated on: 2025-10-08

Assigner: Asea Brown Boveri Ltd. (ABB)

Description
Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-08
Last Modified
2025-10-08
Generated
2026-06-16
AI Q&A
2025-10-08
EPSS Evaluated
2026-06-15
NVD
CVE-2025-9970
EUVD
EUVD-2025-33295
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
abb mconfig 1.4.9.21
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-316 The product stores sensitive information in cleartext in memory.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a Cleartext Storage of Sensitive Information in Memory issue found in ABB MConfig software versions up to 1.4.9.21. It means that sensitive data is stored in memory without encryption, potentially exposing it to unauthorized access.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information stored in memory, which may result in data breaches or compromise of system integrity. Attackers with local access and low privileges might exploit this to gain sensitive data, impacting confidentiality and possibly leading to further attacks.

Compliance Impact

This vulnerability could negatively impact compliance with standards and regulations such as GDPR and HIPAA, which require protection of sensitive information. Storing sensitive data in cleartext in memory increases the risk of data exposure, potentially leading to violations of data protection requirements.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-9970. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart