Source
ABB PSIRT
Source: https://global.abb/group/en/technology/cyber-security/alerts-and-notifications
19 results · Clear filters · Feed
-
Medium max 5.27PAA025438 1 CVE
My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
An update is available that resolves a privately reported vulnerability to the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the node running the product to stop or to become inacces…
-
Medium max 5.02NGA003179 1 CVE
ABB Protection and Control IED Manager (PCM600) - PCM600 Project Import Path Traversal
ABB is aware of a privately reported vulnerability affecting the PCM600 project import functionality. An update is available that resolves this vulnerability in the affected product versions. A specially crafted PCM600 project archive may exploit insufficient…
-
Medium max 6.42NGA003170 1 CVE
ABB Protection and Control IED Manager PCM600 Scheduler Service Privilege Escalation Vulnerability
ABB is aware of a reported vulnerability in ABB Protection and Control IED Manager (PCM600). A local authenticated user belonging to the PCM600 user group may be able to modify the configuration of a Windows service running with SYSTEM privileges. Successful …
-
Medium max 6.49AKK108472A9270 1 CVE
ABB/EL/ELSB/Building Automation File integrity can be bypassed in KNX Update Tool for classic KNX products
ABB has been contacted by a researcher who identified a vulnerability in one of its products. ABB has been contacted by a researcher who identified a vulnerability in one of its products. The vulnerability report has been shared in responsible disclosure. An …
-
Medium max 4.47PAA020047 1 CVE
Advant Master Online Builder DLL vulnerability
ABB became aware of vulnerability in the products versions listed as affected in the advisory, where an incorrect version of Online Builder (ONB) was included in the media. An update is available that resolves the vulnerability, see details in Recommended imm…
-
Medium max 6.6
Freelance Security Lock - Access to Windows OS
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop or make the product inaccessible.
first Jun 10, 2026 -
Medium max 5.8
AC500 V2 Buffer overread on Modbus protocol
ABB became aware of vulnerabilities in AC500 V2 listed as affected in the advisory. An attacker who successfully exploited this vulnerability could access fragments of Modbus telegrams that have been sent earlier by that PLC
first Jul 23, 2025 -
Medium max 6.1
B&R Automation Runtime Vulnerabilities in System Diagnostic Manager (SDM)
An update is available that resolves a vulnerability identified by B&Rs internal security analysis in the product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could take over a remote session or ex…
first Oct 7, 2025 -
Medium max 6.8
B&R Automation Runtime Improper Handling of Flooding conditions on ANSL Server
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. An attacker who successfully exploited this vulnerability could cause the product to stop.
first Jan 19, 2026 -
Medium max 5.0
PVI Insertion of Sensitive Information into Logfile
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. An attacker who successfully exploited this vulnerability could read sensitive informatio…
first Jan 29, 2026 -
Medium max 6.57PAA020125 1 CVE
Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 communication stack
This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communication stack for MMS client applications used in some Automation control system products. Note: IEC 61850 communication typically supports MMS and GOOSE protoco…
-
Medium max 5.33ADR011525 1 CVE
ABB Automation Builder Gateway for Windows with insecure defaults
ABB became aware of severe vulnerability in the products versions listed as affected in the advisory. The Windows gateway is accessible remotely by default. Unauthenticated attackers can therefore search for PLCs, but the user management of the PLCs prevents …
-
Medium max 5.7
System 800xA SECURITY Advisory - ABB 800xA Base 6.0.x, 6.1.x CSLib communication DoS vulnerability
ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause services to crash and restart by sending specifically crafted messages. The vulnerability only af…
first Jun 5, 2024 -
Medium max 6.1
Terra AC wallbox Heap Memory Corruption Vulnerability
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a…
first Sep 16, 2025 -
Medium max 5.52NGA002813 1 CVE
PCM600 SharpZip library vulnerability
An update is available that resolves vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could insert and run arbitrary code in the system.
-
Medium max 6.8
Terra AC wallbox Heap Memory Corruption Vulnerability
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a…
first Oct 20, 2025 -
Medium max 6.89AKK108471A4556 1 CVE
Busch-Welcome® 2 wire Door opener actuator by default in compatibility mode.
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could gain physical, unauthorized access to a Building where the product is installed
-
Medium max 6.72CRT000008 1 CVE
Lite Panel Pro Vulnerability in Session Management
ABB became aware of an internally discovered vulnerability in the Lite Panel Pro product listed as affected in the advisory. An attacker with access to local network who successfully exploits the vulnerability could have unauthorized access during a limited t…
-
Medium max 7.52CRT000007 1 CVE
Ekip Com IEC61850 Vulnerability in 3rd Party Library
ABB is aware of public reports of a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the product to stop communicating on the IEC 61850 network.