ABUP IoT Cloud Platform

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized.

CVEs (1)

Remediations

• ABUP did not respond to CISA's request for coordination.
• The vulnerable method has been removed by the vendor and is no longer accessible. Users of the cloud platform do not need to take any action. Legitimate users of the cloud update platform should be aware that there was a period of exposure that ended on 19 April 2025 and should consider modifying authentication information.

Affected Vendors

Affected Products (1)

Affected Sectors

Communications