CVE-2025-4407

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-613

Affected software

No affected versions have been published.

Timeline

Published
Jun 30, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-440719.8SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php. This vulnerability allowsCVE-2025-440729.8SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php.CVE-2025-440739.8SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php.CVE-2025-440749.8SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php.CVE-2025-440839.8An issue in D-Link DI-8100 16.07.26A1 allows a remote attacker to bypass administrator login authenticationCVE-2025-440849.8D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests,CVE-2025-440898.8An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file.CVE-2025-440908.8An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file.CVE-2025-440915.4yangyouwang crud v1.0.0 is vulnerable to Cross Site Scripting (XSS) via the role management function.CVE-2025-44107.5A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability bCVE-2025-441084.8A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions coCVE-2025-441095.4A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages.
CVE-2025-4407: Medium severity, CVSS 6.7 | Vulnix