Skip to content
OpenAdvisories
High ICSA-26-139-01 1 CVE

ABB CoreSense HM and CoreSense M10

Published Apr 16, 2025 · Updated May 19, 2026 · Revision 5

Summary

An update is available that resolves vulnerability in the product versions listed as affected in this advisory.

A path traversal vulnerability in these products can allow unauthenticated users to gain access to restricted directories. Exploiting this vulnerability can lead to complete system compromise and exposure of sensitive information.

Vulnerabilities 1

  • High 7.1
    CVE-2025-3465

    Path Traversal Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12.

    ABB CoreSense™ HM CoreSense™ M10 ICS / OT

Revision history

  1. #5

    Initial CISA Republication of ABB 3KXG200000R4801 advisory

  2. #4

    Final version with corrected dates.

  3. #3

    Fixed incorrect links.

  4. #2

    Addressed comments.

  5. #1

    Initial version.

References