Skip to content
OpenAdvisories
Medium 3ADR011432 1 CVE

AC500 V2 Buffer overread on Modbus protocol

Published Jul 23, 2025 · Updated May 22, 2026 · Revision 2

Summary

ABB became aware of vulnerabilities in AC500 V2 listed as affected in the advisory.
An attacker who successfully exploited this vulnerability could access fragments of Modbus telegrams that have been sent earlier by that PLC

Vulnerabilities 1

  • Medium 5.8

    Modbus TCP buffer overread

    Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2.

Revision history

  1. #2

    Minor correction to the affected product version in the product tree.

  2. #1

    Initial version.

References