MEDIUM CWE-305
CVE-2025-7064
Freelance Security Lock – Access to Windows OS
ABB·Freelance
6.6/ 10
CVSS 3.1
Medium severity
0.12%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 2% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jun 11, 2026
- Updated
- Jun 11, 2026
- First covered
- Jul 4, 2026
- Latest story
- 4 months ago
Summary
Authentication bypass by primary weakness vulnerability in ABB Freelance.This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024.
CWE-305Authentication bypass by primary weakness
Attack profile
Attack vectorLocal
ComplexityLow
PrivilegesLow
User interactionNone
ScopeUnchanged
ConfidentialityLow
IntegrityHigh
AvailabilityLow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:LAffected products
- ABB Freelanceup to 20132013 SP120162016 SP1