https://vulnogram.org/ Most recent CVEs assigned by Asea Brown Boveri Ltd. (ABB) (abb). https://vulnogram.org/seaview/icons/abb.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-17525 https://vulnogram.org/CVE-2026-17525 Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5. Medium Thu, 15 Oct 2026 10:09:17 GMT https://vulnogram.org/CVE-2026-15953 https://vulnogram.org/CVE-2026-15953 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14. Medium Mon, 28 Sep 2026 13:17:46 GMT https://vulnogram.org/CVE-2026-15952 https://vulnogram.org/CVE-2026-15952 Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14. High Mon, 28 Sep 2026 13:10:28 GMT https://vulnogram.org/CVE-2026-19438 https://vulnogram.org/CVE-2026-19438 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876. High Network Exploitable Wed, 23 Sep 2026 05:05:16 GMT https://vulnogram.org/CVE-2023-5778 https://vulnogram.org/CVE-2023-5778 Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900. This issue affects Freelance Controller DCP: throug… Critical Network Exploitable Fri, 18 Sep 2026 13:19:47 GMT https://vulnogram.org/CVE-2026-79679 https://vulnogram.org/CVE-2026-79679 Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0. High Network Exploitable Thu, 03 Sep 2026 11:27:56 GMT https://vulnogram.org/CVE-2026-12705 https://vulnogram.org/CVE-2026-12705 Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update Tool (BJE): through 2.0.175. Medium Fri, 17 Jul 2026 14:30:48 GMT https://vulnogram.org/CVE-2026-6901 https://vulnogram.org/CVE-2026-6901 Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5. High Mon, 06 Jul 2026 10:01:51 GMT https://vulnogram.org/CVE-2026-6900 https://vulnogram.org/CVE-2026-6900 Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5. Critical Network Exploitable Mon, 06 Jul 2026 09:53:41 GMT https://vulnogram.org/CVE-2025-13162 https://vulnogram.org/CVE-2025-13162 Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master. This issue affects Control Builder A: through 1.4/4; 800xA for Advant Master: through 6.0.3-1, through 6.1.1-1, 6.1.1-3, 6.2.0-1. Medium Tue, 23 Jun 2026 16:12:54 GMT https://vulnogram.org/CVE-2025-7064 https://vulnogram.org/CVE-2025-7064 Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024. Medium Thu, 11 Jun 2026 09:07:30 GMT https://vulnogram.org/CVE-2025-14774 https://vulnogram.org/CVE-2025-14774 Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. High Wed, 03 Jun 2026 09:48:00 GMT https://vulnogram.org/CVE-2025-14773 https://vulnogram.org/CVE-2025-14773 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. High Wed, 03 Jun 2026 09:40:00 GMT https://vulnogram.org/CVE-2025-14772 https://vulnogram.org/CVE-2025-14772 Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. High Wed, 03 Jun 2026 09:25:56 GMT https://vulnogram.org/CVE-2025-14771 https://vulnogram.org/CVE-2025-14771 Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24. Critical Wed, 03 Jun 2026 09:16:02 GMT https://vulnogram.org/CVE-2025-11482 https://vulnogram.org/CVE-2025-11482 An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by an unauthenticated network-based attacker to permanently prevent legitimate users from inte… High Network Exploitable Tue, 26 May 2026 11:43:25 GMT https://vulnogram.org/CVE-2025-3756 https://vulnogram.org/CVE-2025-3756 A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially… High Mon, 13 Apr 2026 17:11:08 GMT https://vulnogram.org/CVE-2025-13779 https://vulnogram.org/CVE-2025-13779 Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. High Fri, 13 Mar 2026 13:11:11 GMT https://vulnogram.org/CVE-2025-13778 https://vulnogram.org/CVE-2025-13778 Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. High Fri, 13 Mar 2026 13:08:40 GMT https://vulnogram.org/CVE-2025-13777 https://vulnogram.org/CVE-2025-13777 Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. High Fri, 13 Mar 2026 13:05:26 GMT https://vulnogram.org/CVE-2026-0936 https://vulnogram.org/CVE-2026-0936 An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging… Medium Thu, 29 Jan 2026 15:30:48 GMT https://vulnogram.org/CVE-2025-11044 https://vulnogram.org/CVE-2025-11044 An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race cond… High Network Exploitable Mon, 19 Jan 2026 15:57:15 GMT https://vulnogram.org/CVE-2025-11043 https://vulnogram.org/CVE-2025-11043 An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unauthenticated attacker on the network to position themselves to intercept and interfere with… Critical Network Exploitable Mon, 19 Jan 2026 15:52:14 GMT https://vulnogram.org/CVE-2025-14510 https://vulnogram.org/CVE-2025-14510 Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120. Critical Network Exploitable Fri, 16 Jan 2026 13:02:30 GMT https://vulnogram.org/CVE-2025-4677 https://vulnogram.org/CVE-2025-4677 Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K. High Wed, 07 Jan 2026 17:09:05 GMT https://vulnogram.org/CVE-2025-4676 https://vulnogram.org/CVE-2025-4676 Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K… High Wed, 07 Jan 2026 17:02:29 GMT https://vulnogram.org/CVE-2025-4675 https://vulnogram.org/CVE-2025-4675 Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K… High Wed, 07 Jan 2026 16:55:43 GMT https://vulnogram.org/CVE-2025-12143 https://vulnogram.org/CVE-2025-12143 Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. Medium Fri, 28 Nov 2025 11:59:27 GMT https://vulnogram.org/CVE-2025-10571 https://vulnogram.org/CVE-2025-10571 Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1. Critical Thu, 20 Nov 2025 18:06:00 GMT https://vulnogram.org/CVE-2025-12142 https://vulnogram.org/CVE-2025-12142 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. Medium Wed, 29 Oct 2025 12:00:42 GMT https://vulnogram.org/CVE-2025-5517 https://vulnogram.org/CVE-2025-5517 Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, A… Medium Mon, 20 Oct 2025 18:27:32 GMT https://vulnogram.org/CVE-2025-3465 https://vulnogram.org/CVE-2025-3465 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12. High Mon, 20 Oct 2025 17:52:40 GMT https://vulnogram.org/CVE-2025-9574 https://vulnogram.org/CVE-2025-9574 Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects . All firmware versions with the Serial Number from 2000 to 5166 Critical Network Exploitable Mon, 20 Oct 2025 16:56:32 GMT https://vulnogram.org/CVE-2025-11498 https://vulnogram.org/CVE-2025-11498 An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The explo… Medium Network Exploitable Tue, 14 Oct 2025 12:42:59 GMT https://vulnogram.org/CVE-2025-9970 https://vulnogram.org/CVE-2025-9970 Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21. High Wed, 08 Oct 2025 16:32:55 GMT https://vulnogram.org/CVE-2025-3449 https://vulnogram.org/CVE-2025-3449 A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions. Medium Network Exploitable Tue, 07 Oct 2025 18:21:32 GMT https://vulnogram.org/CVE-2025-3448 https://vulnogram.org/CVE-2025-3448 Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s bro… Medium Network Exploitable Tue, 07 Oct 2025 18:21:12 GMT https://vulnogram.org/CVE-2025-3450 https://vulnogram.org/CVE-2025-3450 An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions. Critical Network Exploitable Tue, 07 Oct 2025 18:03:53 GMT https://vulnogram.org/CVE-2021-22291 https://vulnogram.org/CVE-2021-22291 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2. High Tue, 07 Oct 2025 13:29:06 GMT https://vulnogram.org/CVE-2025-10504 https://vulnogram.org/CVE-2025-10504 Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. Medium Mon, 29 Sep 2025 04:12:18 GMT https://vulnogram.org/CVE-2025-10207 https://vulnogram.org/CVE-2025-10207 Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. High Thu, 18 Sep 2025 11:25:07 GMT https://vulnogram.org/CVE-2024-48851 https://vulnogram.org/CVE-2024-48851 Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation. This issue affects FLXEON: through 9.3.5. High Thu, 18 Sep 2025 11:17:35 GMT https://vulnogram.org/CVE-2025-10205 https://vulnogram.org/CVE-2025-10205 Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions High Wed, 17 Sep 2025 14:51:52 GMT https://vulnogram.org/CVE-2024-48842 https://vulnogram.org/CVE-2024-48842 Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions High Wed, 17 Sep 2025 14:48:21 GMT https://vulnogram.org/CVE-2025-8754 https://vulnogram.org/CVE-2025-8754 Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14. High Network Exploitable Wed, 13 Aug 2025 17:40:34 GMT https://vulnogram.org/CVE-2025-7679 https://vulnogram.org/CVE-2025-7679 The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT Critical Network Exploitable Mon, 11 Aug 2025 18:36:26 GMT https://vulnogram.org/CVE-2025-7677 https://vulnogram.org/CVE-2025-7677 A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users. This is due to a buffer copy issue that may lead to a software crash. This issue affects all versions of ASPECT. High Network Exploitable Mon, 11 Aug 2025 18:36:23 GMT https://vulnogram.org/CVE-2025-53187 https://vulnogram.org/CVE-2025-53187 Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, acc… Critical Network Exploitable Mon, 11 Aug 2025 17:50:01 GMT https://vulnogram.org/CVE-2025-7745 https://vulnogram.org/CVE-2025-7745 Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2. Medium Network Exploitable Thu, 24 Jul 2025 07:09:11 GMT https://vulnogram.org/CVE-2025-7705 https://vulnogram.org/CVE-2025-7705 : Active Debug Code vulnerability in ABB Switch Actuator 4 DU-83330, ABB Switch actuator, door/light 4 DU -83330-500.This issue affects Switch Actuator 4 DU-83330: All Versions; Switch actuator, door/light 4 DU -83330-500: All Versions. High Tue, 22 Jul 2025 11:49:00 GMT