abb Vulnerability Advisory Catalog

Total 159 security vulnerabilities recorded for abb software and firmware.

← Back to All Vendors
Component: aspect-ent-2_firmware

Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3....

📅 2024-12-05
CVSS 7.7 Dossier →
Component: aspect-ent-2_firmware

Denial of Service vulnerabilities where found providing a potiential for device service disruptions.  Affected products: ABB ASPECT - Enterprise v3....

📅 2024-12-05
CVSS 7.7 Dossier →
CVE-2024-48840 CRITICAL
Component: aspect-ent-2_firmware

Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATR...

📅 2024-12-05
CVSS 10.0 Dossier →
CVE-2024-48839 CRITICAL
Component: aspect-ent-2_firmware

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; ...

📅 2024-12-05
CVSS 10.0 Dossier →
CVE-2024-11317 CRITICAL
Component: aspect-ent-2_firmware

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a p...

📅 2024-12-05
CVSS 10.0 Dossier →
Component: aspect-ent-2_firmware

Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product.  Affected products: ABB ASPECT - Enterprise ...

📅 2024-12-05
CVSS 7.5 Dossier →
Component: advabuild

AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the command queue can use it to launch an attack by runni...

📅 2024-07-23
CVSS 8.8 Dossier →
Component: advabuild

An attacker could exploit the vulnerability by injecting garbage data or specially crafted data. Depending on the data injected each process might be ...

📅 2024-07-23
CVSS 7.8 Dossier →
Component: mint_workbench

Unquoted Search Path or Element vulnerability in ABB Mint Workbench. A local attacker who successfully exploited this vulnerability could gain elev...

📅 2024-07-15
CVSS 7.8 Dossier →
CVE-2024-6298 CRITICAL
Component: aspect-ent-12_firmware

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to ex...

📅 2024-07-05
CVSS 10.0 Dossier →
CVE-2024-6209 CRITICAL
Component: aspect-ent-12_firmware

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to ac...

📅 2024-07-05
CVSS 10.0 Dossier →
Component: aspect-ent-12_firmware

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly co...

📅 2024-07-01
CVSS 8.8 Dossier →
CVE-2024-3036 MEDIUM
Component: 800xa_base_system

Improper Input Validation vulnerability in ABB 800xA Base. An attacker who successfully exploited this vulnerability could cause services to crash by...

📅 2024-06-21
CVSS 5.7 Dossier →
CVE-2024-4009 CRITICAL
Component: 2tma310010b0001_firmware

Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX...

📅 2024-06-05
CVSS 9.2 Dossier →
CVE-2024-4008 CRITICAL
Component: 2tma310010b0001_firmware

FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-Syst...

📅 2024-06-05
CVSS 9.6 Dossier →
CVE-2024-1914 MEDIUM
Component: robotware

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible. The vulnerabili...

📅 2024-05-14
CVSS 6.5 Dossier →
Component: robotware

An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitr...

📅 2024-05-14
CVSS 7.6 Dossier →
Component: ac700f_firmware

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the produc...

📅 2023-08-07
CVSS 8.6 Dossier →
Component: ac700f_firmware

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the produc...

📅 2023-08-07
CVSS 8.6 Dossier →
Component: ao-opc

A vulnerability was found in AO-OPC server versions mentioned above. As the directory information for the service entry is not enclosed in quotation m...

📅 2023-07-28
CVSS 7.2 Dossier →
CVE-2023-3324 MEDIUM
Component: zenon

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker coul...

📅 2023-07-24
CVSS 6.3 Dossier →
CVE-2023-3323 MEDIUM
Component: zenon

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker coul...

📅 2023-07-24
CVSS 5.9 Dossier →
Component: zenon

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker coul...

📅 2023-07-24
CVSS 7.0 Dossier →
Component: zenon

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker coul...

📅 2023-07-24
CVSS 7.0 Dossier →
Page 2 of 7 (159 Total Records)