Source
ABB PSIRT
Source: https://global.abb/group/en/technology/cyber-security/alerts-and-notifications
83 results · Feed
-
Critical max 9.2
IPEC Standalone iSM PHP2Shell and NTFS-3G Vulnerabilities
ABB is aware of public reports of vulnerabilities in third-party components (PHP and NTFS-3G) included in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities may insert and run arbitrary code o…
-
Critical max 9.2
Netcontrol 100, 200, 500, GW502-iM, NAM PHP2Shell Critical Vulnerabilities
ABB is aware of publicly reported information concerning recently disclosed PHP vulnerabilities that impact the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability may insert and run arbitrary code on…
first Oct 30, 2026 -
High max 9.2
Node2Shell Vulnerability for Advanced Batch Management
An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop, disclose process memory or insert and…
-
Critical max 9.2
APROL Impact of PHP2Shell
B&R is aware of public reports of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected devices.
first Oct 23, 2026 -
Critical max 9.2
PHP2Shell Critical Vulnerabilities
ABB is aware of publicly reported information concerning recently disclosed PHP vulnerabilities that impact the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability may insert and run arbitrary code on…
-
Critical max 9.2
ASPECT advisory PHP Vulnerabilities
- General statement ABB became aware of vulnerabilities in ASPECT versions listed as affected in the advisory. The earliest report dates to Oct 2026. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected pro…
-
Critical max 9.2
ABB Manufacturing Execution System- PHP Vulnerabilities in DokuWiki installations
ABB is aware of publicly reported vulnerabilities in the product listed as affected in the advisory. Updates to the affected component that fixed the vulnerabilities are available. An attacker who successfully exploited this vulnerability could remotely execu…
-
High max 7.87PAA026271 1 CVE
ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
ABB identified a critical vulnerability present in ABB Ability Edgenius versions 3.2.3.0 and below. We have not received any reports of this vulnerability being exploited. This issue may allow unauthorized manipulation of the edge authentication database if s…
-
Medium max 5.27PAA025438 1 CVE
My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
An update is available that resolves a privately reported vulnerability to the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the node running the product to stop or to become inacces…
-
High max 7.5
Mint Workbench I Path traversal Vulnerability
A local attacker who successfully exploited this vulnerability could gain elevated privileges by Path Traversal, arbitrarily reading files of system, to cause confidentiality impact of system files.
first Sep 22, 2026 -
High max 7.83ADR011566 1 CVE
ABB Automation Builder - Deserialization of untrusted data
ABB is aware of vulnerabilities in the products versions listed as affected in the advisory. Automation Builder could execute arbitrary code by crafting the project file or project archive file.
-
High max 7.53ADR011565 1 CVE
AC500 V3 - Invalid type usage in visualization
An update is available that resolves publicly reported vulnerability in the products versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could cause a denial-of-service (DoS).
-
Medium max 5.02NGA003179 1 CVE
ABB Protection and Control IED Manager (PCM600) - PCM600 Project Import Path Traversal
ABB is aware of a privately reported vulnerability affecting the PCM600 project import functionality. An update is available that resolves this vulnerability in the affected product versions. A specially crafted PCM600 project archive may exploit insufficient…
-
Medium max 6.42NGA003170 1 CVE
ABB Protection and Control IED Manager PCM600 Scheduler Service Privilege Escalation Vulnerability
ABB is aware of a reported vulnerability in ABB Protection and Control IED Manager (PCM600). A local authenticated user belonging to the PCM600 user group may be able to modify the configuration of a Windows service running with SYSTEM privileges. Successful …
-
High max 7.57PAA010706 1 CVE
Freelance Missing Length Check
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An update is available that resolves the reported vulnerability in the product versions under maintenance. An attacker who successfully exploited this vulnerability co…
-
Critical max 9.14JDE002044 1 CVE
dynovaPRO™ Reset Credentials Vulnerability
ABB is aware of public reports of a vulnerability in the product listed as affected in the advisory. An update has been deployed to the cloud system that resolves a publicly reported vulnerability in the product versions listed above. An attacker who successf…
-
High max 8.63BHS973333 5 CVEs
AC 800PEC, AC 800PEC ARM, AC 800PEC Tool, Control Terminal (xCT) and AC 800PEC Tool Cheetah Impacted by multiple vulnerabilities in Wibu CodeMeter
An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could - Allow arbitrary files to be deleted with system privileges …
-
High max 8.62NGA003144 5 CVEs
ABB AbilityTM zenon Security Risk Due to High-Severity Vulnerabilities in WIBU CodeMeter Runtime
ABB is aware of publicly disclosed security vulnerabilities affecting the WIBU-Systems CodeMeter Runtime for Windows, identified as CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575 and CVE-2026-81576. The CodeMeter Runtime component is used with…
-
High max 8.63ADR011572 5 CVEs
Automation Builder, Drive Application Builder, Virtual Drive, Virtual DrivePlus Impacted by multiple vulnerabilities in Wibu CodeMeter
An update is available that resolves publicly reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could - allow arbitrary files to be deleted with system privileges …
-
High max 8.7SA26P012 1 CVE
mapp Services Use of Weak Authenticators in mapp Audit
An update is available that resolves a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could gain access to the OPC UA server component on affected devices due to insufficient …
-
High max 7.5
ABB AbilityTM zenon Security Risk Due to End-of-Life MongoDB Component
ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who succ…
-
Medium max 6.49AKK108472A9270 1 CVE
ABB/EL/ELSB/Building Automation File integrity can be bypassed in KNX Update Tool for classic KNX products
ABB has been contacted by a researcher who identified a vulnerability in one of its products. ABB has been contacted by a researcher who identified a vulnerability in one of its products. The vulnerability report has been shared in responsible disclosure. An …
-
High max 7.5
ABB AbilityTM zenon Remote Transport Vulnerability
The vulnerability enables unauthorized access to the Reboot OS function within the Remote Transport Service, allowing an attacker to trigger a system reboot without the required authentication. This functionality initiates a system reboot on the target machin…
first Aug 12, 2025 -
Critical max 9.8SA26P011 6 CVEs
Security Issues addressed in APROL R 4.4-01P5
An update is available that resolves several vulnerabilities and updates one or more 3rd party components in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could impact the availability of…
-
High max 7.8
ABB Ability Edgenius: Copy Fail
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
-
Medium max 4.47PAA020047 1 CVE
Advant Master Online Builder DLL vulnerability
ABB became aware of vulnerability in the products versions listed as affected in the advisory, where an incorrect version of Online Builder (ONB) was included in the media. An update is available that resolves the vulnerability, see details in Recommended imm…
-
High max 8.8
Impact of Linux Kernel vulnerabilities on B&R products
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the af…
first Jun 11, 2026 -
Medium max 6.6
Freelance Security Lock - Access to Windows OS
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or make the product inaccessible.
first Jun 10, 2026 -
High max 8.7SA26P009 1 CVE
XZ Utils vulnerability impacting B&R Products
An update is available that resolves vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or corrupt memory data.
-
Critical max 9.99AKK108472A7840 4 CVEs
Vulnerabilities in T-MAC Plus
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. An attacker who successfully exploited any of these vulnerabilities could potentially compromise …
-
High max 7.5SA25P006 1 CVE
PPT30 OPC-UA Server has issues handling concurrent connections
B&R is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could make the OPC-UA server of the product inaccessible.
-
Medium max 5.8
AC500 V2 Buffer overread on Modbus protocol
ABB became aware of vulnerabilities in AC500 V2 listed as affected in the advisory. An attacker who successfully exploited this vulnerability could access fragments of Modbus telegrams that have been sent earlier by that PLC
first Jul 23, 2025 -
High max 8.4
System 800xA affected by 3rd party component vulnerabilities
ABB is aware of public reports of vulnerabilities in 7-Zip version 18.5 and Microsoft Azure Data Studio version 1.32 included in the product versions listed as affected in the advisory. The vulnerability in 7-Zip can be exploited if attacker gains control ove…
first Mar 31, 2026 -
High max 7.5
Automation Runtime and mapp View Use of insecure algorithm for self-signed certificates
An update is available that resolves a privately reported vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability may masquerade as services on affected devices.
first Jan 15, 2025 -
High max 9.2
B&R APROL Potential Privilege Escalation and Information Disclosure
Updates are available that resolve privately reported vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploits these vulnerabilities could elevate privileges or gather sensitive information.
first Mar 24, 2025 -
Critical max 10.0
B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Oct 7, 2025 -
Medium max 6.1
B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM)
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could take over a remote session or ex…
first Oct 7, 2025 -
High max 7.4
Automation Studio Insufficient Server Certificate Validation
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R …
first Jan 19, 2026 -
Medium max 6.8
B&R Automation Runtime Improper Handling of Flooding conditions on ANSL Server
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Jan 19, 2026 -
High max 8.3
B&R PCs vulnerable to PixieFail attack
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS…
first Jan 29, 2026