Abb vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-13599	AE Ability Edgenius ABB	7.8	0%	Oct 22	ABB Ability Edgenius \| Missing Authentication in Edgenius AuthDB
CVE-2026-17525	MC My Control System ABB	5.2	0%	Oct 15	My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion
CVE-2026-15953	PA Protection and control IED manager (PCM600) ABB	5.0	0%	Sep 28	Path Traversal During Project Archive Import
CVE-2026-15952	PA Protection and control IED manager (PCM600) ABB	6.4	0%	Sep 28	Improper Permission Assignment in Scheduler Service
CVE-2026-19438	MW Mint Workbench I ABB	7.5	0%	Sep 23	Mint Workbench I Path traversal Vulnerability
CVE-2023-5778	FC Freelance Controller AC800 ABB	7.5	0%	Sep 18	Missing Length Check
CVE-2026-12705	KU KNX Update Tool (ABB) ABB	6.4	0%	Jul 17	Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool
CVE-2025-13162	8F 800xA for Advant Master ABB	4.4	0%	Jun 23	Advant Master Online Builder DLL vulnerability
CVE-2025-7064	FR Freelance ABB	6.6	0%	Jun 11	Freelance Security Lock – Access to Windows OS
CVE-2025-14774	TP T-MAC Plus ABB	7.4	0%	Jun 3	Communication analysis between the Card Reader and TP2CardReaderService daemon
CVE-2025-14773	TP T-MAC Plus ABB	5.4	0%	Jun 3	Stored Cross-Site Scripting in ABB T-MAC Plus web application
CVE-2025-14772	TP T-MAC Plus ABB	8.8	0%	Jun 3	Broken Access Control in ABB T-MAC Plus web application
CVE-2025-14771	TP T-MAC Plus ABB	9.9	0%	Jun 3	File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site
CVE-2025-3756	SO S+ Operations ABB	6.5	0%	Apr 13	Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850
CVE-2025-13779	AG AWIN GW100 rev.2 ABB	8.3	0%	Mar 13	Configuration Data Spill
CVE-2025-13778	AG AWIN GW120 ABB	6.5	0%	Mar 13	Device Reboot Control
CVE-2025-13777	AG AWIN GW100 rev.2 ABB	8.3	0%	Mar 13	Authentication Bypass due to Improper Session Validation
CVE-2025-14510	AA ABB Ability OPTIMAX ABB	8.1	0%	Jan 16	ABB Ability OPTIMAX Authentication Bypass in Single-Sign On
CVE-2025-4677	WS WebPro SNMP Card PowerValue ABB	6.5	0%	Jan 7	Idle session timeout is not configured for multiple open ports
CVE-2025-4676	WS WebPro SNMP Card PowerValue ABB	8.8	0%	Jan 7	Authentication bypass by brute forcing Authentication Headers
CVE-2025-4675	WS WebPro SNMP Card PowerValue ABB	6.5	0%	Jan 7	Improper implementation of Modbus protocol leading to DOS attack
CVE-2025-12143	TA Terra AC wallbox ABB	6.1	0%	Nov 28	Stack Memory Corruption Vulnerability
CVE-2025-10571	AA ABB Ability Edgenius ABB	9.6	0%	Nov 20	ABB Ability Edgenius Authentication Bypass
CVE-2025-12142	TA Terra AC wallbox ABB	6.1	0%	Oct 29	BSS(Block Started by Symbol) Memory Corruption Vulnerability
CVE-2025-5517	TA Terra AC wallbox (MID/ CE) -Terra AC Juno CE ABB	6.8	0%	Oct 20	Heap Memory Corruption Vulnerability
CVE-2025-3465	CH CoreSense™ HM ABB	7.1	0%	Oct 20	Path Traversal Vulnerability
CVE-2025-9574	AI ALS-mini-s8 IP ABB	10.0	1%	Oct 20	Missing Authentication Vulnerability
CVE-2025-9970	MC MConfig ABB	7.4	0%	Oct 8	Application credential stored in clear text in memory
CVE-2021-22291	EV EIBPORT V3 KNX ABB	8.0	0%	Oct 7	EIBPORT Reflected XSS
CVE-2025-10504	TA Terra AC wallbox ABB	6.1	0%	Sep 29	Heap Memory Corruption Vulnerability
CVE-2025-10207	FL FLXEON ABB	7.2	0%	Sep 18	Authenticated File Disclosure/Delete
CVE-2024-48851	FL FLXEON ABB	7.2	1%	Sep 18	Remote Code Execution
CVE-2025-10205	FL FLXEON ABB	8.8	0%	Sep 17	Predictable Salt and Weak Hashing Algorithm
CVE-2024-48842	FL FLXEON ABB	7.0	0%	Sep 17	Hardcoded passwords
CVE-2025-8754	AA ABB AbilityTM zenon ABB	7.5	0%	Aug 13	ABB AbilityTM zenon Remote Transport Vulnerability
CVE-2025-7679	AS Aspect ABB	8.1	0%	Aug 11	Session ID Basic Auth Bypass
CVE-2025-7677	AS Aspect ABB	5.9	0%	Aug 11	DOS attack possible
CVE-2025-53187	AS ASPECT ABB	9.8	1%	Aug 11	Unauthenticated RCE
CVE-2025-7745	AV AC500 V2 ABB	5.8	0%	Jul 24	Modbus TCP buffer overread
CVE-2025-7705	SA Switch actuator, door/light 4 DU -83330-500 ABB	6.8	0%	Jul 22	Authentication bypass due to compatibility mode enabled by default
CVE-2025-6071	RM RMC-100 ABB	5.3	0%	Jul 3	Hard Coded Key used for AES encryption
CVE-2025-6072	RL RMC-100 LITE ABB	7.5	0%	Jul 3	Stack Buffer Overflow in MQTTCore
CVE-2025-6073	RL RMC-100 LITE ABB	7.5	0%	Jul 3	Stack Buffer Overflow in MQTTCore
CVE-2025-6074	RM RMC-100 ABB	6.5	0%	Jul 3	Authentication Bypass to the MQTT configuration Web Interface
CVE-2025-4407	LP Lite Panel Pro ABB	6.7	0%	Jun 30	Application does not invalidate session after password reset
CVE-2024-13967	EV EIBPORT V3 KNX ABB	8.8	0%	Jun 4	ession-Management Failure
CVE-2024-13945	AS ASPECT-Enterprise ABB	6.0	0%	May 23	Stored Absolute Path Traversal
CVE-2024-51552	MS MATRIX Series ABB	6.0	0%	May 22	Weak Password Storage
CVE-2024-13958	NS NEXUS Series ABB	4.8	0%	May 22	Stored Cross Site Scripting
CVE-2024-13957	MS MATRIX Series ABB	7.6	0%	May 22	SSRF Server Side Request Forgery
CVE-2024-13956	NS NEXUS Series ABB	6.7	0%	May 22	SSL Verification Bypass
CVE-2024-13955	NS NEXUS Series ABB	8.8	0%	May 22	SQL Injection 2nd Order
CVE-2024-13954	AS ASPECT-Enterprise ABB	6.5	0%	May 22	Serialization / Deserialization of configuration data
CVE-2024-13953	MS MATRIX Series ABB	4.9	0%	May 22	Sensitive Information disclosed in log files
CVE-2024-13952	MS MATRIX Series ABB	8.4	0%	May 22	Remote Code Execution
CVE-2024-51553	NS NEXUS Series ABB	6.5	0%	May 22	Predictable Filename
CVE-2024-13951	MS MATRIX Series ABB	7.6	0%	May 22	One way hash with predictable salt
CVE-2024-13950	MS MATRIX Series ABB	6.8	0%	May 22	Log Injection
CVE-2024-13949	AS ASPECT-Enterprise ABB	6.8	0%	May 22	Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3
CVE-2024-48848	NS NEXUS Series ABB	6.5	0%	May 22	LARGECONTENT - device disk overutilization