nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-9970 CVE-2025-9970
MEDIUM
Application credential stored in clear text in memory
Record summary
CVE-2025-9970 has a selected CVSS score of 5.7 (medium).
Description
Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 8, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
MConfigBrowse ABB / MConfigDefault status: unaffected | CVE List | Through 1.4.9.21 | affected |
References
2search.abb.com
https://search.abb.com/library/Download.aspx?DocumentID=4TZ00000006008&LanguageCode=en&DocumentPartId=&Action=Launch