cve-2025-8754

CVE-2025-8754 is a security vulnerability affecting ABB Ability zenon versions 7.50 through 14. The flaw involves an unauthenticated Remote Transport Service path that allows attackers on reachable networks to reboot a target machine. While not a code-execution vulnerability and not reported as exploited in the wild, it poses a significant risk in industrial environments where an unexpected reboot can disrupt production. The advisory was republished by CISA on May 26, 2026, based on ABB PSIRT advisory 2NGA002743. Discussions on WindowsForum highlight the importance of addressing such vulnerabilities even when they seem minor, as they can still lead to operational incidents.