Source
ABB PSIRT
Source: https://global.abb/group/en/technology/cyber-security/alerts-and-notifications
11 results · Clear filters · Feed
-
Critical max 9.2
IPEC Standalone iSM PHP2Shell and NTFS-3G Vulnerabilities
ABB is aware of public reports of vulnerabilities in third-party components (PHP and NTFS-3G) included in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities may insert and run arbitrary code o…
-
Critical max 9.2
Netcontrol 100, 200, 500, GW502-iM, NAM PHP2Shell Critical Vulnerabilities
ABB is aware of publicly reported information concerning recently disclosed PHP vulnerabilities that impact the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability may insert and run arbitrary code on…
first Oct 30, 2026 -
High max 9.2
Node2Shell Vulnerability for Advanced Batch Management
An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop, disclose process memory or insert and…
-
Critical max 9.2
APROL Impact of PHP2Shell
B&R is aware of public reports of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected devices.
first Oct 23, 2026 -
Critical max 9.2
PHP2Shell Critical Vulnerabilities
ABB is aware of publicly reported information concerning recently disclosed PHP vulnerabilities that impact the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability may insert and run arbitrary code on…
-
Critical max 9.2
ASPECT advisory PHP Vulnerabilities
- General statement ABB became aware of vulnerabilities in ASPECT versions listed as affected in the advisory. The earliest report dates to Oct 2026. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected pro…
-
Critical max 9.2
ABB Manufacturing Execution System- PHP Vulnerabilities in DokuWiki installations
ABB is aware of publicly reported vulnerabilities in the product listed as affected in the advisory. Updates to the affected component that fixed the vulnerabilities are available. An attacker who successfully exploited this vulnerability could remotely execu…
-
High max 7.5
ABB AbilityTM zenon Security Risk Due to End-of-Life MongoDB Component
ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who succ…
-
High max 7.8
ABB Ability Edgenius: Copy Fail
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
-
High max 8.8
Impact of Linux Kernel vulnerabilities on B&R products
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the af…
first Jun 11, 2026 -
High max 8.4
System 800xA affected by 3rd party component vulnerabilities
ABB is aware of public reports of vulnerabilities in 7-Zip version 18.5 and Microsoft Azure Data Studio version 1.32 included in the product versions listed as affected in the advisory. The vulnerability in 7-Zip can be exploited if attacker gains control ove…
first Mar 31, 2026