ABB vulnerabilities
259 vulnerabilities
Known vulnerabilities in ABB products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 371 products.
Products
50 of 371- Aspect Enterprise58 vulnerabilities
- Matrix Series58 vulnerabilities
- Nexus Series58 vulnerabilities
- Aspect Ent 1229 vulnerabilities
- Aspect Ent 229 vulnerabilities
- Aspect Ent 25629 vulnerabilities
- Aspect Ent 9629 vulnerabilities
- Matrix 1129 vulnerabilities
- Matrix 21629 vulnerabilities
- Matrix 23229 vulnerabilities
- Matrix 26429 vulnerabilities
- Matrix 29629 vulnerabilities
- Nexus 212829 vulnerabilities
- Nexus 26429 vulnerabilities
- Nexus 3 212829 vulnerabilities
- Nexus 3 26429 vulnerabilities
- Nexus 2128 A28 vulnerabilities
- Nexus 2128 F28 vulnerabilities
- Nexus 2128 G28 vulnerabilities
- Nexus 264 A28 vulnerabilities
- Nexus 264 F28 vulnerabilities
- Nexus 264 G28 vulnerabilities
- Esoms13 vulnerabilities
- Pb610 Panel Builder 60010 vulnerabilities
- ABB Ability™ Symphony® Plus Operations9 vulnerabilities
- Symphony \+ Historian9 vulnerabilities
- Symphony \+ Operations9 vulnerabilities
- ABB Ability™ Symphony® Plus Historian8 vulnerabilities
- Advabuild7 vulnerabilities
- Flxeon7 vulnerabilities
- Symphony Plus S\+ Operations7 vulnerabilities
- Zenon7 vulnerabilities
- Automation Builder6 vulnerabilities
- Control Builder Safe6 vulnerabilities
- Mint Workbench6 vulnerabilities
- Symphony Plus S+ Engineering6 vulnerabilities
- 800Xa System5 vulnerabilities
- ABB Ability System 800Xa5 vulnerabilities
- Advant OCS AC 100 OPS Server5 vulnerabilities
- Advant OCS Control Builder A5 vulnerabilities
- Central Licensing System5 vulnerabilities
- Compact Hmi5 vulnerabilities
- Composer CTK5 vulnerabilities
- Composer Harmony5 vulnerabilities
- Composer Melody5 vulnerabilities
- Drive Composer5 vulnerabilities
- Harmony OPC Server Standalone5 vulnerabilities
- Knowledge Manager5 vulnerabilities
- Manufacturing Operations Management5 vulnerabilities
- OPC Data Link5 vulnerabilities
CVE-2026-17525abbmy control system
EPSS score0.14%
Incomplete cleanup vulnerability in ABB My Control System.
This issue affects My Control System: 26.4 and 26.5.CVE-2018-1168abbabb microscada+1EPSS score0.31%
This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the access controls for the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user. An attacker can leverage this vulnerability to escalate privileges to SYSTEM. Was ZDI-CAN-5097.CVE-2018-19008abbcp400pb_firmware+1EPSS score1.57%
The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertion of specially crafted files which could allow arbitrary code execution.CVE-2018-17928abbcms-770_firmwareEPSS score0.77%
The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism.CVE-2018-17926abbeth-fw_firmware+2EPSS score0.79%
The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism.CVE-2018-5477abbnetcadopsEPSS score1.23%
An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, and netCADOPS Web Application Version 8.1 and prior. A vulnerability exists in the password entry section of netCADOPS Web Application that may expose critical database information.CVE-2018-10616abbabb panel builder 800+1EPSS score1.21%
ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert and run arbitrary code on a computer where the affected product is used.CVE-2013-5021abbdatamanager+4EPSS score2.07%
Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remote attackers to create and execute arbitrary files via a full pathname in an argument to the ExportStyle method in the (1) CWNumEdit, (2) CWGraph, (3) CWBoolean, (4) CWSlide, or (5) CWKnob ActiveX control, in conjunction with file content in the (a) Caption or (b) FormatString property value.CVE-2021-22291abbeibport v3 knx+1EPSS score0.32%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.CVE-2021-22278abbpcm600+4EPSS score0.13%
A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.CVE-2021-22283abbmerging unit- smu615+23EPSS score0.17%
Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1, ABB Relion protection relays - 620 series IEC/CN 2.0, ABB Relion protection relays - 620 series IEC/CN 2.0 FP1, ABB Relion protection relays - REX640 PCL1, ABB Relion protection relays - REX640 PCL2, ABB Relion protection relays - REX640 PCL3, ABB Relion protection relays - RER615, ABB Remote Monitoring and Control - REC615, ABB Merging Unit- SMU615 allows Communication Channel Manipulation.This issue affects Relion protection relays - 611 series: from 1.0.0 before 2.0.3; Relion protection relays - 615 series IEC 4.0 FP1: from 4.1.0 before 4.1.9; Relion protection relays - 615 series CN 4.0 FP1: from 4.1.0 before 4.1.8; Relion protection relays - 615 series IEC 5.0: from 5.0.0 before 5.0.12; Relion protection relays - 615 series IEC 5.0 FP1: from 5.1.0 before 5.1.20; Relion protection relays - 620 series IEC/CN 2.0: from 2.0.0 before 2.0.11; Relion protection relays - 620 series IEC/CN 2.0 FP1: from 2.1.0 before 2.1.15; Relion protection relays - REX640 PCL1: from 1.0.0 before 1.0.8; Relion protection relays - REX640 PCL2: from 1.1.0 before 1.1.4; Relion protection relays - REX640 PCL3: from 1.2.0 before 1.2.1; Relion protection relays - RER615: from 2.0.0 before 2.0.3; Remote Monitoring and Control - REC615: from 1.0.0 before 2.0.3; Merging Unit- SMU615: from 1.0.0 before 1.0.2.CVE-2021-22286abbpni800_firmware+1EPSS score1.06%
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.CVE-2021-22284abb800xa, control software for ac 800m opc server for ac 800m+4EPSS score0.83%
Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.CVE-2021-22276abbsystem access point+6EPSS score0.26%
The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point.CVE-2021-22279abbomnicore_c30_firmware+1EPSS score1.49%
A Missing Authentication vulnerability in RobotWare for the OmniCore robot controller allows an attacker to read and modify files on the robot controller if the attacker has access to the Connected Services Gateway Ethernet port.CVE-2021-22272abbmybuildings+3EPSS score0.66%
The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch remotely under very specific circumstances. The issue is fixed in the cloud side of the system. No firmware update is needed for customer products. If a user wants to understand if (s)he is affected, please read the advisory. This issue affects: ABB and Busch-Jaeger, ControlTouchCVE-2021-22288abbpni800_firmware+1EPSS score1.06%
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.CVE-2021-22277abb800xa+6EPSS score0.95%
Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service.CVE-2021-22285abbpni800_firmware+1EPSS score1.04%
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive.CVE-2016-2281abbpanel_builder_800EPSS score0.30%
Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.