CVE-2025-7064Freelance Security Lock – Access to Windows OS

5.6MediumCVSS base score
0.12%Exploitation in 30 daysEPSS · top 98% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024.

Timeline

2025
4 Jul 2025
4 Jul 2025
ID reserved
By ABB
2026
11 Jun 202611 months later
11 Jun 2026· 11 months later
Published

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2025-7064, by who scored it
Scored by	CVSS	Score	Vector
ABBCNA (assigner)	4.0	Medium5.6	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:P/AU:N/R:U/V:D/RE:L/U:Green
ABBCNA (assigner)	3.1	Medium6.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
NVDNVD · Deferred	4.0	Medium5.6	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Green

EPSS (exploitation in 30 days): 0.12% · top 98% of all CVEs (14 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.6.

Affected products

ABB · Freelance
- affected ≤ 2013
- affected 2013 SP1
- affected 2016
- affected 2016 SP1
- affected 2019
- affected 2019 SP1
- affected 2019 SP1 FP1
- affected 2024

References1

https://search.abb.com/library/Download.aspx?DocumentID=7PAA020361&LanguageCode=en&DocumentPartId=&Action=Launch (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-7064](https://cveledger.app/badge/CVE-2025-7064.svg)](https://cveledger.app/cve/CVE-2025-7064)

Record last updated 11 Jun 2026, 12:43 UTC.