abb Vulnerability Advisory Catalog

Total 159 security vulnerabilities recorded for abb software and firmware.

← Back to All Vendors
CVE-2023-2625 CRITICAL
Component: txpert_hub_coretec_4_firmware

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any lev...

๐Ÿ“… 2023-06-28
CVSS 9.0 Dossier →
Component: rex640_pcl1_firmware

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (fir...

๐Ÿ“… 2023-06-13
CVSS 3.1 Dossier →
Component: aspect-ent-2_firmware

Improper Input Validation vulnerability in ABB Ltd. ASPECTยฎ-Enterprise on ASPECTยฎ-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021...

๐Ÿ“… 2023-06-05
CVSS 7.2 Dossier →
Component: aspect-ent-2_firmware

Improper Privilege Management vulnerability in ABB Ltd. ASPECTยฎ-Enterprise on ASPECTยฎ-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S...

๐Ÿ“… 2023-06-05
CVSS 7.8 Dossier →
Component: platform_engineering_tools

Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who alr...

๐Ÿ“… 2023-05-22
CVSS 7.8 Dossier →
Component: terra_ac_wallbox_ul40_firmware

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (...

๐Ÿ“… 2023-05-17
CVSS 7.1 Dossier →
Component: terra_ac_wallbox_ul40_firmware

Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB ...

๐Ÿ“… 2023-05-17
CVSS 8.8 Dossier →
CVE-2023-0580 MEDIUM
Component: my_control_system

Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allowsย an attacker who successfully exploited this vulne...

๐Ÿ“… 2023-04-06
CVSS 5.4 Dossier →
CVE-2022-3192 MEDIUM
Component: ac500_cpu_firmware

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affects AC500 V2: from 2.0.0 befor...

๐Ÿ“… 2023-03-31
CVSS 5.3 Dossier →
CVE-2023-1258 MEDIUM
Component: flow-x\/m_firmware

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allo...

๐Ÿ“… 2023-03-31
CVSS 5.3 Dossier →
CVE-2022-4126 CRITICAL
Component: rccmd

Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RC...

๐Ÿ“… 2023-03-27
CVSS 9.6 Dossier →
Component: h5692448_g104_firmware

Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar ...

๐Ÿ“… 2023-03-16
CVSS 6.3 Dossier →
Component: symphony_plus_s\+_operations

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2...

๐Ÿ“… 2023-03-02
CVSS 8.8 Dossier →
Component: smu615_firmware

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion ...

๐Ÿ“… 2023-02-28
CVSS 6.2 Dossier →
CVE-2022-1607 MEDIUM
Component: infinity_dc_power_plant

Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Fo...

๐Ÿ“… 2023-02-24
CVSS 4.6 Dossier →
Component: zenon

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alt...

๐Ÿ“… 2022-08-24
CVSS 8.1 Dossier →
Component: zenon

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more n...

๐Ÿ“… 2022-08-24
CVSS 6.2 Dossier →
Component: zenon

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and...

๐Ÿ“… 2022-08-24
CVSS 5.9 Dossier →
Component: rmc-100_firmware

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Comman...

๐Ÿ“… 2022-07-21
CVSS 8.1 Dossier →
CVE-2022-1596 MEDIUM
Component: rex640_pcl1_firmware

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to l...

๐Ÿ“… 2022-06-21
CVSS 6.5 Dossier →
Component: automation_builder

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitra...

๐Ÿ“… 2022-06-15
CVSS 7.3 Dossier →
Component: automation_builder

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitra...

๐Ÿ“… 2022-06-15
CVSS 7.8 Dossier →
Component: automation_builder

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitra...

๐Ÿ“… 2022-06-15
CVSS 7.8 Dossier →
Component: automation_builder

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitra...

๐Ÿ“… 2022-06-15
CVSS 7.8 Dossier →
Page 3 of 7 (159 Total Records)