Skip to content
OpenAdvisories
High 3ADR011407 2 CVEs

ABB Automation Builder Vulnerabilities in user management and access control

Published Apr 30, 2025 · Updated Jul 25, 2025 · Revision 2

Vendor: ABB Product: Automation Builder

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the following section.

An attacker who successfully exploited this vulnerability could overrule the Automation Builder’s user management. Workarounds to close the vulnerabilities are available.

Vulnerabilities 2

  • High 7.8
    CVE-2025-3394

    Vulnerability in user management of Automation Builder

    Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0.

    ABB Automation Builder ICS / OT
  • High 7.1
    CVE-2025-3395

    Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB …

    ABB Automation Builder ICS / OT

Revision history

  1. #2

    Final

  2. #1

    Initial Version

References