Skip to content
Abb vulnerabilities
Products
Show 131 moreShow less
Newest
-
abb ability edgenius
ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
CVE-2026-13599
5.8 Medium
-
abb my control system
My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
CVE-2026-17525
5.1 Medium
-
abb protection and control ied manager (pcm600)
Path Traversal During Project Archive Import
CVE-2026-15953
5.6 Medium
-
abb protection and control ied manager (pcm600)
Improper Permission Assignment in Scheduler Service
CVE-2026-15952
7.1 High
-
abb mint workbench i
Mint Workbench I Path traversal Vulnerability
CVE-2026-19438
8.2 High
-
abb freelance controller ac700, freelance controller ac800, freelance controller ac900 +1 more +3 more
Missing Length Check
CVE-2023-5778
9.2 Critical
-
abb knx update tool (abb), knx update tool (bje) +1 more
Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool
CVE-2026-12705
5.9 Medium
-
abb 800xa for advant master, control builder a +1 more
Advant Master Online Builder DLL vulnerability
CVE-2025-13162
4.1 Medium
-
abb freelance
Freelance Security Lock – Access to Windows OS
CVE-2025-7064
5.6 Medium
-
abb t-mac plus
Communication analysis between the Card Reader and TP2CardReaderService daemon
CVE-2025-14774
7.2 High
-
abb t-mac plus
Stored Cross-Site Scripting in ABB T-MAC Plus web application
CVE-2025-14773
7.2 High
-
abb t-mac plus
Broken Access Control in ABB T-MAC Plus web application
CVE-2025-14772
7.3 High
-
abb t-mac plus
File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site
CVE-2025-14771
7.3 High
-
abb ac800m (system 800xa), s+ operations, symphony plus mr (melody rack) +1 more +3 more
Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850
CVE-2025-3756
7.1 High
-
abb awin gw100 rev.2, awin gw120 +1 more
Configuration Data Spill
CVE-2025-13779
7.2 High
-
abb awin gw100 rev.2, awin gw120 +1 more
Device Reboot Control
CVE-2025-13778
7.1 High
-
abb awin gw100 rev.2, awin gw120 +1 more
Authentication Bypass due to Improper Session Validation
CVE-2025-13777
7.2 High
-
abb ability optimax
ABB Ability OPTIMAX Authentication Bypass in Single-Sign On
CVE-2025-14510
9.2 Critical
-
abb webpro snmp card powervalue, webpro snmp card powervalue ul +1 more
Idle session timeout is not configured for multiple open ports
CVE-2025-4677
7.1 High
-
abb webpro snmp card powervalue, webpro snmp card powervalue ul +1 more
Authentication bypass by brute forcing Authentication Headers
CVE-2025-4676
8.4 High
-
abb webpro snmp card powervalue, webpro snmp card powervalue ul +1 more
Improper implementation of Modbus protocol leading to DOS attack
CVE-2025-4675
7.1 High
-
abb terra ac wallbox
Stack Memory Corruption Vulnerability
CVE-2025-12143
6.9 Medium
-
abb ability edgenius
ABB Ability Edgenius Authentication Bypass
CVE-2025-10571
9.4 Critical
-
abb terra ac wallbox
BSS(Block Started by Symbol) Memory Corruption Vulnerability
CVE-2025-12142
6.9 Medium
-
abb terra ac wallbox (jp), terra ac wallbox (mid/ ce) -terra ac juno ce, terra ac wallbox (mid/ ce) -terra ac mid +3 more +5 more
Heap Memory Corruption Vulnerability
CVE-2025-5517
6.1 Medium
-
abb coresense™ hm, coresense™ m10 +1 more
Path Traversal Vulnerability
CVE-2025-3465
8.2 High
-
abb als-mini-s4 ip, als-mini-s8 ip +1 more
Missing Authentication Vulnerability
CVE-2025-9574
9.9 Critical
-
abb mconfig
Application credential stored in clear text in memory
CVE-2025-9970
5.7 Medium
-
abb eibport v3 knx, eibport v3 knx gsm +1 more
EIBPORT Reflected XSS
CVE-2021-22291
8.5 High
-
abb terra ac wallbox
Heap Memory Corruption Vulnerability
CVE-2025-10504
6.9 Medium
-
abb flxeon
Authenticated File Disclosure/Delete
CVE-2025-10207
7.5 High
-
abb flxeon
Remote Code Execution
CVE-2024-48851
7.5 High
-
abb flxeon
Predictable Salt and Weak Hashing Algorithm
CVE-2025-10205
8.7 High
-
abb flxeon
Hardcoded passwords
CVE-2024-48842
7.3 High
-
abb abilitytm zenon
ABB AbilityTM zenon Remote Transport Vulnerability
CVE-2025-8754
8.7 High
-
abb aspect
Session ID Basic Auth Bypass
CVE-2025-7679
9.2 Critical
-
abb aspect
DOS attack possible
CVE-2025-7677
8.2 High
-
abb aspect
Unauthenticated RCE
CVE-2025-53187
9.3 Critical
-
abb ac500 v2
Modbus TCP buffer overread
CVE-2025-7745
6.9 Medium
-
abb switch actuator 4 du-83330, switch actuator, door/light 4 du -83330-500 +1 more
Authentication bypass due to compatibility mode enabled by default
CVE-2025-7705
8.6 High
-
abb rmc-100, rmc-100 lite +1 more
Hard Coded Key used for AES encryption
CVE-2025-6071
6.3 Medium
-
abb rmc-100, rmc-100 lite +1 more
Stack Buffer Overflow in MQTTCore
CVE-2025-6072
8.2 High
-
abb rmc-100, rmc-100 lite +1 more
Stack Buffer Overflow in MQTTCore
CVE-2025-6073
8.2 High
-
abb rmc-100, rmc-100 lite +1 more
Authentication Bypass to the MQTT configuration Web Interface
CVE-2025-6074
6.3 Medium
-
abb lite panel pro
Application does not invalidate session after password reset
CVE-2025-4407
6.8 Medium
-
abb eibport v3 knx, eibport v3 knx gsm +1 more
ession-Management Failure
CVE-2024-13967
9.4 Critical
-
abb aspect-enterprise, matrix series, nexus series +2 more
Stored Absolute Path Traversal
CVE-2024-13945
8.4 High
-
abb aspect-enterprise, matrix series, nexus series +2 more
Weak Password Storage
CVE-2024-51552
7.1 High
-
abb aspect-enterprise, matrix series, nexus series +2 more
Stored Cross Site Scripting
CVE-2024-13958
4.6 Medium
-
abb aspect-enterprise, matrix series, nexus series +2 more
SSRF Server Side Request Forgery
CVE-2024-13957
7.0 High
- Show olderLoading…