High severity7.1NVD Advisory· Published Oct 20, 2025· Updated Apr 15, 2026

CVE-2025-3465

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12.

Affected products

Abb/CoreSense HMllm-create
Range: <=2.3.1

Patches

Vulnerability mechanics

References

search.abb.com/library/Download.aspxnvd

News mentions

ABB CoreSense HM and CoreSense M10
CISA ICS Advisories

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000