Skip to content
OpenAdvisories
Critical ICSA-26-132-05 1 CVE

ABB AC500 V3 Stack Buffer Overflow in Cryptographic Message Syntax

Published Mar 12, 2026 · Updated May 12, 2026 · Revision 2

Vendor: ABB Product: AC500 V3 Firmware Product: PM5xxx

Summary

ABB became aware of vulnerability in the products versions listed as affected in the advisory. An update is available that resolves publicly reported vulnerability.

An attacker who successfully exploited these vulnerabilities could cause a crash, denial-of-service (DoS), or potentially remote code execution.

Vulnerabilities 1

  • High 8.8
    CVE-2025-15467 Public exploit EPSS 75%

    Stack buffer overflow in CMS (Auth)EnvelopedData parsing

    Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote c…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #2

    Initial CISA Republication of ABB PSIRT 3ADR011536 advisory

  2. #1

    Initial version.

References