Skip to content
OpenAdvisories
Medium ICSA-26-274-03 2 CVEs

ABB Protection and Control IED Manager PCM600

Published Oct 1, 2026 · Updated Oct 1, 2026

Vendor: ABB Product: Protection and control IED manager (PCM600)

Summary

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or overwrite files.

Vulnerabilities 2

  • Medium 6.4
    CVE-2026-15952

    Improper Permission Assignment in Scheduler Service

    Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.

    ABB Protection and control IED manager (PCM600) ICS / OT
  • Medium 5.0
    CVE-2026-15953

    Path Traversal During Project Archive Import

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.

    ABB Protection and control IED manager (PCM600) ICS / OT

Revision history

  1. #1

    Initial Publication

References