Source
ABB PSIRT
Source: https://global.abb/group/en/technology/cyber-security/alerts-and-notifications
23 results · Clear filters · Feed
-
Critical max 8.8SA26P003 2 CVEs
OpenSSL Vulnerabilities in B&R products
B&R is aware of public reports of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or insert and run arbitrary code.
-
Critical max 9.2
IPEC Standalone iSM PHP2Shell and NTFS-3G Vulnerabilities
ABB is aware of public reports of vulnerabilities in third-party components (PHP and NTFS-3G) included in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities may insert and run arbitrary code o…
-
Critical max 9.2
Netcontrol 100, 200, 500, GW502-iM, NAM PHP2Shell Critical Vulnerabilities
ABB is aware of publicly reported information concerning recently disclosed PHP vulnerabilities that impact the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability may insert and run arbitrary code on…
first Oct 30, 2026 -
Critical max 9.2
APROL Impact of PHP2Shell
B&R is aware of public reports of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected devices.
first Oct 23, 2026 -
Critical max 9.2
PHP2Shell Critical Vulnerabilities
ABB is aware of publicly reported information concerning recently disclosed PHP vulnerabilities that impact the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability may insert and run arbitrary code on…
-
Critical max 9.2
ASPECT advisory PHP Vulnerabilities
- General statement ABB became aware of vulnerabilities in ASPECT versions listed as affected in the advisory. The earliest report dates to Oct 2026. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected pro…
-
Critical max 9.2
ABB Manufacturing Execution System- PHP Vulnerabilities in DokuWiki installations
ABB is aware of publicly reported vulnerabilities in the product listed as affected in the advisory. Updates to the affected component that fixed the vulnerabilities are available. An attacker who successfully exploited this vulnerability could remotely execu…
-
Critical max 9.14JDE002044 1 CVE
dynovaPRO™ Reset Credentials Vulnerability
ABB is aware of public reports of a vulnerability in the product listed as affected in the advisory. An update has been deployed to the cloud system that resolves a publicly reported vulnerability in the product versions listed above. An attacker who successf…
-
Critical max 9.8SA26P011 6 CVEs
Security Issues addressed in APROL R 4.4-01P5
An update is available that resolves several vulnerabilities and updates one or more 3rd party components in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could impact the availability of…
-
Critical max 9.99AKK108472A7840 4 CVEs
Vulnerabilities in T-MAC Plus
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. An attacker who successfully exploited any of these vulnerabilities could potentially compromise …
-
Critical max 10.0
B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Oct 7, 2025 -
Critical max 7.5
B&R Automation Studio Update of SQLite version
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products,…
first Feb 18, 2026 -
Critical max 7.54HZM000604 25 CVEs
ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (SQLite 3.2.4)
ABB is aware of public reports of vulnerabilities in a 3rd party dependency SQLite Version 3.2.4 which was delivered together with the installation package of Camera Connect Version 2.0.0.42 and below. An update is available that resolves a privately reported…
-
Critical max 8.83ADR011536 1 CVE
AC500 V3 Stack buffer overflow in Cryptographic Message Syntax
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves publicly reported vulnerability. An attacker who successfully exploited these vulnerabilities could cause a crash, denial-of-se…
-
Critical max 8.0
ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (VLC)
ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately…
first Nov 27, 2025 -
Critical max 9.67PAA022088 1 CVE
Edgenius Management Portal Authentication Bypass
ABB identified a critical vulnerability present in ABB Ability Edgenius starting from version 3.2.0.0. We have not received any reports of this vulnerability being exploited. An unauthenticated attacker could exploit this vulnerability to: → install and run a…
-
Critical max 10.0
ALS-mini-S4/S8 IP Missing Authentication Vulnerability and its Mitigations
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a…
first Oct 20, 2025 -
Critical max 9.8
ELSB/BLBA ASPECT advisory several CVEs
ABB became aware of vulnerabilities in ASPECT product versions listed as affected in the advisory. The earliest report dates to June 2023. ABB has fixed most of the vulnerabilities reported. At the moment there are no plans of corrective measures for remainin…
first Aug 11, 2025 -
Critical max 7.8
ELSB/Home Solutions Outdated SW Components in ABB Welcome IP-Gateway.
ABB became aware of vulnerabilities in IPGW product versions listed as affected in the advisory. An attacker who successfully exploits these vulnerabilities could potentially gain unauthorized access and potentially compromise the system's - and log-file - co…
first May 29, 2025 -
Critical max 9.1
ELSB/BLBA ASPECT advisory several CVEs
ABB became aware of vulnerabilities in ASPECT product versions listed as affected in the advisory. The earliest report dates to June 2023. ABB has fixed most of the vulnerabilities reported. At the moment there are no plans of corrective measures for remainin…
first May 22, 2025 -
Critical max 10.0
FLXeon Controllers Cyber Security Advisory
An update is available that resolves a privately reported vulnerability in the product versions listed as affected in this advisory. FLXEON devices are not intended to be internet-facing. A product advisory issued in June 2023 informed customers of this param…
first Jan 20, 2025 -
Critical max 9.8
Hardcoded credentials in ASPECT Energy Management System
ABB became aware of vulnerabilities in the product versions listed as affected in the advisory. ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed customers of this already. An attacker who successfully expl…
first Feb 5, 2025 -
Critical max 9.1
Drive Composer Path Traversal Vulnerability
An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the executi…
first Feb 5, 2025