Skip to content
OpenAdvisories
High ICSA-26-146-03 1 CVE

ABB Ability Zenon Remote Transport Vulnerability (Update A)

Published Aug 12, 2025 · Updated May 28, 2026 · Revision 4

Vendor: ABB Product: Ability Zenon

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.
The vulnerability enables unauthorized access to the Reboot OS function within the Remote Transport Service, allowing an attacker to trigger a system reboot without the required authentication. This functionality initiates a system reboot on the target machine. However, remote exploitation of this vulnerability is not feasible unless the attacker has already gained access to the network where the affected ABB Ability Zenon system is deployed.
At the time of writing, there is no evidence that this vulnerability is being actively exploited in the wild.

Vulnerabilities 1

  • High 7.5
    CVE-2025-8754

    ABB AbilityTM zenon Remote Transport Vulnerability

    Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14.

    ABB ABB AbilityTM zenon ICS / OT

Revision history

  1. #4

    CISA Republication update based on ABB PSIRT 2NGA002743 advisory. Removed "Trademark" abbreviation from the Ability product name in the title and throughout the advisory.

  2. #3

    Initial CISA Republication of ABB PSIRT 2NGA002743 advisory

  3. #2

    Minor correction to the affected product version in the product tree.

  4. #1

    Initial version.

References