Skip to content
OpenAdvisories

Vendor

ABB

227 known vulnerabilities.

Products

ASPECT-Enterprise 60 NEXUS Series 60 MATRIX Series 60 eSOMS 13 ABB Ability™ Symphony® Plus Operations 9 ABB Ability™ Symphony® Plus Historian 8 FLXEON 7 Symphony Plus S+ Operations 7 Control Builder Safe 6 Symphony Plus S+ Engineering 6 RMC-100 LITE 5 Mint WorkBench 5 Central Licensing System 5 ABB Ability System 800xA 5 Compact HMI 5 Composer Harmony 5 Composer Melody 5 Harmony OPC Server Standalone 5 Advant OCS Control Builder A 5 Composer CTK 5 AdvaBuild 5 OPC Server for Mod 300 (non-800xA) 5 OPC Data Link 5 Knowledge Manager 5 Manufacturing Operations Management 5 Advant OCS AC 100 OPS Server 5 ABB Ability™ zenon 4 Drive Composer entry 4 Drive Composer pro 4 ABB Automation Builder 4 RMC-100 4 T-MAC Plus 4 TG/S 3.2 Telephone Gateway 4 System 800xA Base 3 Base Software for SoftControl 3 ABB Ability™ SCADAvantage 3 RobotWare 6 3 Terra AC wallbox (UL40/80A) 3 Terra AC wallbox (UL32A) 3 Terra AC wallbox (JP) 3
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.6
    CVE-2024-47784

    Unverified Password Change

    Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier.

    ABB ANC ANC-mini ANC-L ICS / OT
  • Low 3.1
    CVE-2023-2876

    Session cookie exposure for client side script

    Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX…

    ABB REX640 PCL1 REX640 PCL3 REX640 PCL2 ICS / OT
  • Low 3.5
    CVE-2019-19092

    ABB eSOMS: Viewstate without MAC Signature

    ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstate might thus not be noticed.

    ABB eSOMS ICS / OT
  • Low 3.5
    CVE-2019-19090

    ABB eSOMS: Secure Flag not set

    For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping.

    ABB eSOMS ICS / OT
  • Low 3.9
    CVE-2019-18994

    ABB PB610 HMIStudio crashes after launching an empty *.JPR application file

    Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty *.JPR application file. An attacker with access to the file system might be able to cause applicatio…

    ABB ABB PB610 Panel Builder 600 ICS / OT