Description
Missing authentication for critical function vulnerability in ABB Ability Edgenius.

This issue affects Ability Edgenius: through 3.2.3.0.
Published: 2026-10-22
Score: 5.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized access to critical functions due to missing authentication
Action: Apply Patch
AI Analysis

Impact

Missing authentication in the Edgenius AuthDB allows an attacker to execute a critical function without proper credentials, potentially enabling unauthorized manipulation of system settings, data, or operations.

Affected Systems

ABB Ability Edgenius versions up to and including 3.2.3.0 are affected.

Risk and Exploitability

The CVSS score of 5.8 indicates a medium severity vulnerability. EPSS information is not available, and the issue is not listed in the CISA KEV catalog. The lack of authentication could allow an attacker with network or local access to the exposed function to perform privileged actions. Applying a vendor‑issued fix or restricting access mitigates this risk.

Generated by OpenCVE AI on October 22, 2026 at 18:32 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest ABB Ability Edgenius firmware or software update that addresses the authentication flaw.
  • If a patch is not yet available, restrict network access to the Edgenius AuthDB endpoint using firewall rules or network segmentation to limit exposure to trusted administrators.
  • Enable logging and monitoring of authentication attempts to detect unauthorized usage and configure alerts for anomalous activity.

Generated by OpenCVE AI on October 22, 2026 at 18:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Abb
Abb ability Edgenius
Vendors & Products Abb
Abb ability Edgenius
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 22 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
Description Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0.
Title ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 5.8, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/AU:N/R:I/V:D/RE:L/U:Amber'}

Subscriptions

Abb Ability Edgenius
cve-icon MITRE

Status: PUBLISHED

Assigner: ABB

Published:

Updated: 2026-10-22T19:00:30.651Z

Reserved: 2026-06-29T07:56:37.237Z

Link: CVE-2026-13599

cve-icon Vulnrichment

Updated: 2026-10-22T18:58:40.915Z

cve-icon NVD

Status : Deferred

Published: 2026-10-22T18:17:28.663

Modified: 2026-10-23T19:57:42.660

Link: CVE-2026-13599

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T18:45:10Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function