Source
ABB PSIRT
Source: https://global.abb/group/en/technology/cyber-security/alerts-and-notifications
42 results · Clear filters · Feed
-
High max 9.2
Node2Shell Vulnerability for Advanced Batch Management
An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop, disclose process memory or insert and…
-
High max 7.87PAA026271 1 CVE
ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
ABB identified a critical vulnerability present in ABB Ability Edgenius versions 3.2.3.0 and below. We have not received any reports of this vulnerability being exploited. This issue may allow unauthorized manipulation of the edge authentication database if s…
-
High max 7.5
Mint Workbench I Path traversal Vulnerability
A local attacker who successfully exploited this vulnerability could gain elevated privileges by Path Traversal, arbitrarily reading files of system, to cause confidentiality impact of system files.
first Sep 22, 2026 -
High max 7.83ADR011566 1 CVE
ABB Automation Builder - Deserialization of untrusted data
ABB is aware of vulnerabilities in the products versions listed as affected in the advisory. Automation Builder could execute arbitrary code by crafting the project file or project archive file.
-
High max 7.53ADR011565 1 CVE
AC500 V3 - Invalid type usage in visualization
An update is available that resolves publicly reported vulnerability in the products versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could cause a denial-of-service (DoS).
-
High max 7.57PAA010706 1 CVE
Freelance Missing Length Check
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An update is available that resolves the reported vulnerability in the product versions under maintenance. An attacker who successfully exploited this vulnerability co…
-
High max 8.63BHS973333 5 CVEs
AC 800PEC, AC 800PEC ARM, AC 800PEC Tool, Control Terminal (xCT) and AC 800PEC Tool Cheetah Impacted by multiple vulnerabilities in Wibu CodeMeter
An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could - Allow arbitrary files to be deleted with system privileges …
-
High max 8.62NGA003144 5 CVEs
ABB AbilityTM zenon Security Risk Due to High-Severity Vulnerabilities in WIBU CodeMeter Runtime
ABB is aware of publicly disclosed security vulnerabilities affecting the WIBU-Systems CodeMeter Runtime for Windows, identified as CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575 and CVE-2026-81576. The CodeMeter Runtime component is used with…
-
High max 8.63ADR011572 5 CVEs
Automation Builder, Drive Application Builder, Virtual Drive, Virtual DrivePlus Impacted by multiple vulnerabilities in Wibu CodeMeter
An update is available that resolves publicly reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could - allow arbitrary files to be deleted with system privileges …
-
High max 8.7SA26P012 1 CVE
mapp Services Use of Weak Authenticators in mapp Audit
An update is available that resolves a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could gain access to the OPC UA server component on affected devices due to insufficient …
-
High max 7.5
ABB AbilityTM zenon Security Risk Due to End-of-Life MongoDB Component
ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who succ…
-
High max 7.5
ABB AbilityTM zenon Remote Transport Vulnerability
The vulnerability enables unauthorized access to the Reboot OS function within the Remote Transport Service, allowing an attacker to trigger a system reboot without the required authentication. This functionality initiates a system reboot on the target machin…
first Aug 12, 2025 -
High max 7.8
ABB Ability Edgenius: Copy Fail
ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulne…
-
High max 8.8
Impact of Linux Kernel vulnerabilities on B&R products
B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the af…
first Jun 11, 2026 -
High max 8.7SA26P009 1 CVE
XZ Utils vulnerability impacting B&R Products
An update is available that resolves vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or corrupt memory data.
-
High max 7.5SA25P006 1 CVE
PPT30 OPC-UA Server has issues handling concurrent connections
B&R is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploits this vulnerability could make the OPC-UA server of the product inaccessible.
-
High max 8.4
System 800xA affected by 3rd party component vulnerabilities
ABB is aware of public reports of vulnerabilities in 7-Zip version 18.5 and Microsoft Azure Data Studio version 1.32 included in the product versions listed as affected in the advisory. The vulnerability in 7-Zip can be exploited if attacker gains control ove…
first Mar 31, 2026 -
High max 7.5
Automation Runtime and mapp View Use of insecure algorithm for self-signed certificates
An update is available that resolves a privately reported vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability may masquerade as services on affected devices.
first Jan 15, 2025 -
High max 9.2
B&R APROL Potential Privilege Escalation and Information Disclosure
Updates are available that resolve privately reported vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploits these vulnerabilities could elevate privileges or gather sensitive information.
first Mar 24, 2025 -
High max 7.4
Automation Studio Insufficient Server Certificate Validation
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R …
first Jan 19, 2026 -
High max 8.3
B&R PCs vulnerable to PixieFail attack
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS…
first Jan 29, 2026 -
High max 8.87PAA017341 4 CVEs
PostgreSQL vulnerabilities in ABB Ability™ Symphony® Plus Engineering
ABB became aware of vulnerability in the products versions listed as affected in the advisory. The ABB S+ Engineering product versions are affected by vulnerabilities in PostgreSQL version 13.11 and earlier versions. If an attacker gains access to a site’s S+…
-
High max 8.34JNO000329 3 CVEs
AWIN Gateways Vulnerabilities in Embedded Webserver
ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves the reported vulnerabilities. AWIN gateways are not intended to be internet-facing. An attacker who successfully exploited this…
-
High max 8.33ADR011524 3 CVEs
AC500 V3 Multiple vulnerabilities
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory. An update is available that resolves these vulnerabilities. An attacker who successfully exploited these vulnerabilities could bypass the user management and…
-
High max 8.19AKK108472A1331 1 CVE
ABB Ability™ OPTIMAX® Authentication Bypass in Single-Sign On with Azure Active Directory
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory, if the optional integration with Azure Active Directory for Single-Sign On is enabled. We have not received any reports of this vulnerability being exploited…
-
High max 8.82CRT000009 3 CVEs
WebPro SNMP Card PowerValue Multiple Vulnerabilities
ABB became aware of multiple internally discovered vulnerabilities in the WebPro SNMP card PowerValue for the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with access to local network who successfully expl…
-
High max 7.1
CoreSense™ HM and CoreSense™ M10 File Path Traversal Vulnerability
An update is available that resolves vulnerability in the product versions listed as affected in this advisory. A path traversal vulnerability in these products can allow unauthenticated users to gain access to restricted directories. Exploiting this vulnerab…
first Apr 16, 2025 -
High max 7.44TZ00000006008 1 CVE
LVS MConfig Insecure memory handling
ABB became aware of an internally discovered vulnerability in the MConfig product versions listed as affected in the advisory. An attacker with access to local networks who successfully exploits vulnerability could have access to application’s sensitive infor…
-
High max 8.09AKK108471A7808 1 CVE
EIBPORT Reflected XSS
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who succe…
-
High max 8.8
FLXeon Controllers Multiple vulnerabilities
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. FLXEON devices are not intended to be internet-facing. A product advisory issued in June 2023 informed customers of this parameter. An attacker can successfully exploi…
first Sep 9, 2025 -
High max 7.5
RMC - 100 Vulnerabilities in web UI (REST Interface)
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT…
first Jul 3, 2025 -
High max 7.8
ABB Automation Builder Vulnerabilities in user management and access control
ABB is aware of vulnerabilities in the product versions listed as affected in the following section. An attacker who successfully exploited this vulnerability could overrule the Automation Builder’s user management. Workarounds to close the vulnerabilities ar…
first Apr 30, 2025 -
High max 8.8
EIBPORT Session Management Fail
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who succe…
first Jun 2, 2025 -
High max 7.3
ANC – ABB Network Card Multiple vulnerabilities in ANC
An update is available that resolves internally discovered vulnerabilities in the product versions listed as affected in the advisory. Depending upon the vulnerability, an attacker with the access to the local network who successfully exploited this vulnerabi…
-
High max 8.89AKK108470A9989 15 CVEs
ABB MV Drives Affected by CODESYS RTS (Runtime System) Vulnerabilities
Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System v.3.5.15.0 is utilized in the firmware of ABB MV ACS6080 and ACS5000 drives to provide IEC 61131 programming capabilities. The…
-
High max 8.12NGA002427 8 CVEs
ABB Arctic ARG600, ARC600, ARR600, ARP600 Arctic Wireless Gateway Modem Module and OpenSSH vulnerabilities
ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This c…
-
High max 9.82NGA002579 42 CVEs
ABB Arctic communication solution ARM600 Vulnerabilities
ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of t…
-
High max 8.8
ABB ACS880 +N8010 Drives CODESYS RTS Vulnerabilities
Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System is utilized in the firmware of ABB ACS880 drives to provide IEC 61131-3 programming capabilities. These vulnerabilities could …
first Mar 26, 2025 -
High max 8.8
Low Voltage DC Drives and Power Controllers CODESYS RTS Vulnerabilities
CODESYS group published several vulnerabilities regarding the CODESYS Runtime System, which is included in the firmware of ABB LV DC drives and power controllers. It is used to implement a selection of features and to provide IEC 611131-3 programming capabili…
first Mar 26, 2025 -
High max 7.59AKK108470A8565 1 CVE
RMC-100 Vulnerability in the Web UI (REST Interface)
An update is available that resolves a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the web UI to stop.