Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

263 records

Vendor: ABB Clear all filters
TI-2026-13359 CVE-2026-15953 · GHSA-469j-4qv8-mjfp

Path Traversal During Project Archive Import

Priority LOW 24

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600).

CVSS 4.0MEDIUM 5.6 Local Low privileges User interaction EPSS 0.00117 Published 2026-09-28 No fix listed CWE-22
TI-2026-13358 CVE-2026-15952 · GHSA-xfjh-6447-rv2j

Improper Permission Assignment in Scheduler Service

Priority LOW 32

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).

CVSS 4.0HIGH 7.1 Local High privileges No interaction EPSS 0.00094 Published 2026-09-28 No fix listed CWE-732
TI-2026-15845 CVE-2026-19438 · GHSA-h6fw-4cwx-rhhr

Mint Workbench I Path traversal Vulnerability

Priority MEDIUM 42

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I.

CVSS 4.0HIGH 8.2 Local No auth No interaction EPSS 0.00411 Published 2026-09-23 No fix listed CWE-22
TI-2023-05315 CVE-2023-5778 · GHSA-j29v-23r4-r42c

Missing Length Check

Priority MEDIUM 46

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance Controller AC900.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0046 Published 2026-09-18 Fixed in 2019 SP1 FP1, 2024 CWE-130
TI-2025-12033 CVE-2025-13162 · GHSA-f2p3-r6h4-xx6j

Advant Master Online Builder DLL vulnerability

Priority LOW 18

Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.00117 Published 2026-06-23 Fixed in 6.1.1-2, 6.1.1-4 +1 CWE-427
TI-2025-06426 CVE-2025-7064 · GHSA-385f-mwvx-qwq5

Freelance Security Lock – Access to Windows OS

Priority LOW 24

Authentication bypass by primary weakness vulnerability in ABB Freelance.

CVSS 4.0MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00116 Published 2026-06-11 No fix listed CWE-305
TI-2025-13488 CVE-2025-14773 · GHSA-ch6v-382r-q8r4

Stored Cross-Site Scripting in ABB T-MAC Plus web application

Priority LOW 33

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00181 Published 2026-06-03 No fix listed CWE-79
TI-2025-12594 CVE-2025-13779 · GHSA-mgmg-gc6c-436g

Configuration Data Spill

Priority LOW 31

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.00284 Published 2026-03-13 No fix listed CWE-306
TI-2025-12593 CVE-2025-13778 · GHSA-vq55-x4qg-pqgj

Device Reboot Control

Priority LOW 31

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00273 Published 2026-03-13 No fix listed CWE-306
TI-2025-12592 CVE-2025-13777 · GHSA-7q82-436p-v87w

Authentication Bypass due to Improper Session Validation

Priority LOW 33

Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.00227 Published 2026-03-13 No fix listed CWE-294
TI-2025-13253 CVE-2025-14510 · GHSA-86xf-rv86-26v4

ABB Ability OPTIMAX Authentication Bypass in Single-Sign On

Priority MEDIUM 42

Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00433 Published 2026-01-16 Fixed in 6.3.1-251120, 6.4.1-251120 CWE-303
TI-2025-04175 CVE-2025-4677 · GHSA-w48j-gq3h-j3j3

Idle session timeout is not configured for multiple open ports

Priority LOW 31

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: throug…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00206 Published 2026-01-07 No fix listed CWE-613
TI-2025-04174 CVE-2025-4676 · GHSA-m9qp-frxf-whqw

Authentication bypass by brute forcing Authentication Headers

Priority LOW 38

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card…

CVSS 4.0HIGH 8.4 Adjacent network No auth User interaction EPSS 0.00265 Published 2026-01-07 No fix listed CWE-303
TI-2025-04173 CVE-2025-4675 · GHSA-gv42-43rh-4gxv

Improper implementation of Modbus protocol leading to DOS attack

Priority LOW 31

Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00203 Published 2026-01-07 No fix listed CWE-754
TI-2025-11137 CVE-2025-12143 · GHSA-xqrg-6p99-hc76

Stack memory corruption in ABB Terra AC wallbox

Priority LOW 32

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

CVSS 4.0MEDIUM 6.9 Adjacent network High privileges No interaction EPSS 0.00208 Published 2025-11-28 No fix listed CWE-121
TI-2025-09674 CVE-2025-10571 · GHSA-f6jx-f7j2-jg72

ABB Ability Edgenius Authentication Bypass

Priority MEDIUM 42

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00319 Published 2025-11-20 No fix listed CWE-288
TI-2025-11136 CVE-2025-12142 · GHSA-gqxj-68c6-vgjx

BSS(Block Started by Symbol) Memory Corruption Vulnerability

Priority LOW 30

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

CVSS 4.0MEDIUM 6.9 Adjacent network High privileges No interaction EPSS 0.00208 Published 2025-10-29 No fix listed CWE-120
TI-2025-04957 CVE-2025-5517 · GHSA-56rf-7q3j-jwjf

Heap memory corruption in ABB Terra AC wallbox

Priority LOW 27

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wall…

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.0028 Published 2025-10-20 No fix listed CWE-122
Load more