Skip to content
OpenAdvisories
High ICSA-25-310-03 4 CVEs

ABB FLXeon Controllers

Published Nov 6, 2025 · Updated Nov 6, 2025

Vendor: ABB Product: CBXi-8R8 (2CQG201001R1021) Product: CBXi-8R8-H (2CQG201001R1021) Product: FBTi-6T1-1U1R (2CQG201022R1011) Product: FBTi-7T7-1U1R (2CQG201022R1011) Product: FBVi-2U4-4T (2CQG201015R1021 ) Product: FBVi-2U4-4T-IMP (2CQG201016R1021) Product: FBVi-2U4-4T-SI Product: FBXi-8R8-H-X96 (2CQG201029R1011) Product: FBXi-8R8-X96 (2CQG201028R1011) Product: FBXi-8R8-X96-S (2CQG201606R1011) Product: FBXi-X256 (2CQG201014R1021) Product: FBXi-X48 (2CQG201018R1021)

Summary

Successful exploitation of these vulnerabilities could allow an attacker to take remote control of the product, insert and run arbitrary code, and crash the device being accessed.

Vulnerabilities 4

  • High 8.8
    CVE-2025-10205

    Predictable Salt and Weak Hashing Algorithm

    Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions

    ABB FLXEON ICS / OT
  • High 7.2
    CVE-2024-48851

    Remote Code Execution

    Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation. This issue affects FLXEON: through 9.3.5.

    ABB FLXEON ICS / OT
  • High 7.2
    CVE-2025-10207

    Authenticated File Disclosure/Delete

    Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.

    ABB FLXEON ICS / OT
  • High 7.0
    CVE-2024-48842

    Hardcoded passwords

    Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions

    ABB FLXEON ICS / OT

Revision history

  1. #1

    Initial Publication

References