ABUP IoT Cloud Platform

🗓️ 20 May 2025 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 10 Views

Exploitation risk allows unauthorized access to device profiles; CISA recommends secure practices for defense.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-4692	20 May 202510:00	–	circl
CNNVD	ABUP Cloud Update Platform 安全漏洞	22 May 202500:00	–	cnnvd
CVE	CVE-2025-4692	22 May 202523:12	–	cve
Cvelist	CVE-2025-4692 ABUP IoT Cloud Platform Incorrect Privilege Assignment	22 May 202523:12	–	cvelist
EUVD	EUVD-2025-28077	3 Oct 202520:07	–	euvd
NVD	CVE-2025-4692	23 May 202500:15	–	nvd
Positive Technologies	PT-2025-22569 · Unknown · Abup Cloud Update Platform	22 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-4692	24 May 202523:17	–	redhatcve
Vulnrichment	CVE-2025-4692 ABUP IoT Cloud Platform Incorrect Privilege Assignment	22 May 202523:12	–	vulnrichment

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-140-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-25-140-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

20 May 2025 06:00Current

7.4High risk

Vulners AI Score7.4

CVSS 45.9

CVSS 3.16.8

EPSS0.00168

SSVC

iot cloud platform vulnerability exploitation cisa recommendations network security virtual private network industrial control systems cybersecurity strategies malicious activity reporting.