CVE Program partner

ABB

Asea Brown Boveri Ltd. (ABB)

API
CVEs, 365 days33286 all time, 4 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationAsea Brown Boveri Ltd. (ABB)
RoleCNA
TypeVendor
Reports toicscert → CISA
ScopeABB issues only.
Advisorieshttps://global.abb/group/en/technology/cyber-security/alerts-and-notifications

Latest CVEs · RSS

  • CVE-2026-17525 2026-10-15 · CVSS 5.2
    Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.
  • CVE-2026-15953 2026-09-28 · CVSS 5.0
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue aff
  • CVE-2026-15952 2026-09-28 · CVSS 6.4
    Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and contr
  • CVE-2026-19438 2026-09-23 · CVSS 7.5
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: thro
  • CVE-2023-5778 2026-09-18 · CVSS 7.5
    Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC80
  • CVE-2026-79679 2026-09-03 · CVSS 8.7
    Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services:
  • CVE-2026-12705 2026-07-17 · CVSS 6.4
    Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB): through 2.
  • CVE-2026-6901 2026-07-06 · CVSS 7.7
    Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.
  • CVE-2026-6900 2026-07-06 · CVSS 7.4
    Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.
  • CVE-2025-13162 2026-06-23 · CVSS 4.4
    Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master. This issue affects Control Builder A: through 1.4/4; 800x
  • CVE-2025-7064 2026-06-11 · CVSS 6.6
    Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1,
  • CVE-2025-14774 2026-06-03 · CVSS 7.4
    Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
  • CVE-2025-14773 2026-06-03 · CVSS 8.0
    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
  • CVE-2025-14772 2026-06-03 · CVSS 8.8
    Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
  • CVE-2025-14771 2026-06-03 · CVSS 9.9
    Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
  • CVE-2025-11482 2026-05-26 · CVSS 7.5
    An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by
  • CVE-2025-3756 2026-04-13 · CVSS 7.1
    A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacke
  • CVE-2025-13779 2026-03-13 · CVSS 8.3
    Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120
  • CVE-2025-13778 2026-03-13 · CVSS 6.5
    Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120
  • CVE-2025-13777 2026-03-13 · CVSS 8.3
    Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2
  • CVE-2026-0936 2026-01-29 · CVSS 5.1
    An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to ga
  • CVE-2025-11044 2026-01-19 · CVSS 8.9
    An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to
  • CVE-2025-11043 2026-01-19 · CVSS 9.1
    An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio versions before 6.5 could allow an unau
  • CVE-2025-14510 2026-01-16 · CVSS 8.1
    Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 befor
  • CVE-2025-4677 2026-01-07 · CVSS 6.5
    Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerVa

All CVE Program partners