Skip to content
OpenAdvisories
Medium ICSA-26-120-01 1 CVE

ABB System 800xA, Symphony Plus IEC 61850

Published Apr 13, 2026 · Updated Apr 30, 2026 · Revision 2

Vendor: ABB Product: <=6.0.0303.0 Product: <=6.1.0031.0 Product: <=6.1.1004.0 Product: <=6.1.1202.0 Product: <=6.2.0006.0 Product: 6.1.1-3 Product: CI850 Product: CI868 Product: PM 877 Product: S+ Operations

Summary

This vulnerability was privately reported relating to ABB’s implementation of the IEC 61850 communication stack for MMS client applications used in some Automation control system products.

Note: IEC 61850 communication typically supports MMS and GOOSE protocols. Some ABB products support both, others only MMS (e.g. S+ Operations and PM 877). In any case, GOOSE communication is not impacted by this reported vulnerability.

If an attacker gains access to a site’s IEC 61850 network, then exploiting this vulnerability will result in a device fault (PM 877, CI850 and CI868 modules) and will require a manual restart.

If this attack is directed at a S+ Operations node running IEC 61850 connectivity, this will result in a crash in the IEC 61850 communication driver which, if continued a repeating basis, will also result in a denial-of-service situation. Note that this does not have an impact on the overall availability and functionality of the S+ Operations node, only the IEC 61850 communication function.

The System 800xA IEC61850 Connect is not affected.

Vulnerabilities 1

Revision history

  1. #2

    Initial CISA Republication of ABB PSIRT 7PAA020125 advisory

  2. #1

    Initial version.

References