Skip to content
OpenAdvisories
High ICSA-25-133-04 2 CVEs

ABB Automation Builder (Update A)

Published Apr 30, 2025 · Updated May 21, 2026 · Revision 4

Vendor: ABB Product: Automation Builder

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the following section.

An attacker who successfully exploited this vulnerability could overrule the Automation Builder’s user management. Workarounds to close the vulnerabilities are available.

Vulnerabilities 2

  • High 7.8
    CVE-2025-3394

    Vulnerability in user management of Automation Builder

    Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0.

    ABB Automation Builder ICS / OT
  • High 7.1
    CVE-2025-3395

    Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB …

    ABB Automation Builder ICS / OT

Revision history

  1. #4

    CISA Republication update based on ABB PSIRT 3ADR011407 advisory

  2. #3

    Final

  3. #2

    CISA Republication - Initial Publication

  4. #1

    Initial Version

References