CVE-2025-9970
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-10-08

Last updated on: 2025-10-08

Assigner: Asea Brown Boveri Ltd. (ABB)

Description
Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-10-08
Last Modified
2025-10-08
Generated
2026-07-06
AI Q&A
2025-10-08
EPSS Evaluated
2026-07-05
NVD
CVE-2025-9970
EUVD
EUVD-2025-33295

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
abb mconfig 1.4.9.21

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-316 The product stores sensitive information in cleartext in memory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Cleartext Storage of Sensitive Information in Memory issue found in ABB MConfig software versions up to 1.4.9.21. It means that sensitive data is stored in memory without encryption, potentially exposing it to unauthorized access.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information stored in memory, which may result in data breaches or compromise of system integrity. Attackers with local access and low privileges might exploit this to gain sensitive data, impacting confidentiality and possibly leading to further attacks.

Compliance Impact

This vulnerability could negatively impact compliance with standards and regulations such as GDPR and HIPAA, which require protection of sensitive information. Storing sensitive data in cleartext in memory increases the risk of data exposure, potentially leading to violations of data protection requirements.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-9970. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart