ABB Ability Zenon Missing Authentication for Critical Function Vulnerability

A vulnerability exists in ABB Ability Zenon versions 7.50 through 14, due to missing authentication for critical functions. This flaw could potentially be exploited to access or manipulate functions that require authentication, leading to unauthorized actions within the application.

Impact

Exploitation of this vulnerability could allow unauthorized users to access critical functions that should require authentication, potentially leading to unauthorized changes or actions within the application.

Remediation

Users are advised to consult the ABB document 2NGA002743 for guidance on addressing this vulnerability.