Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ABB — Vulnerabilities & Security Advisories 225

Browse all 225 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.

Found 58 results / 225 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2024-13945 Stored Absolute Path Traversal — ASPECT-Enterprise CWE-36 6.0 Medium 2025-05-23
CVE-2024-51552 Weak Password Storage — ASPECT-Enterprise CWE-257 6.0 Medium 2025-05-22
CVE-2024-13958 Stored Cross Site Scripting — ASPECT-Enterprise CWE-79 4.8 Medium 2025-05-22
CVE-2024-13957 SSRF Server Side Request Forgery — ASPECT-Enterprise CWE-918 7.6 High 2025-05-22
CVE-2024-13956 SSL Verification Bypass — ASPECT-Enterprise CWE-295 6.7 Medium 2025-05-22
CVE-2024-13955 SQL Injection 2nd Order — ASPECT-Enterprise CWE-89 8.8 High 2025-05-22
CVE-2024-13954 Serialization / Deserialization of configuration data — ASPECT-Enterprise CWE-922 6.5 Medium 2025-05-22
CVE-2024-13953 Sensitive Information disclosed in log files — ASPECT-Enterprise CWE-359 4.9 Medium 2025-05-22
CVE-2024-13952 Remote Code Execution — ASPECT-Enterprise CWE-94 8.4 High 2025-05-22
CVE-2024-51553 Predictable Filename — ASPECT-Enterprise CWE-73 6.5 Medium 2025-05-22
CVE-2024-13951 One way hash with predictable salt — ASPECT-Enterprise CWE-760 7.6 High 2025-05-22
CVE-2024-13950 Log Injection — ASPECT-Enterprise CWE-79 6.8 Medium 2025-05-22
CVE-2024-13949 Log Forging — ASPECT-Enterprise CWE-117 6.8 Medium 2025-05-22
CVE-2024-48848 LARGECONTENT - device disk overutilization — ASPECT-Enterprise CWE-774 6.5 Medium 2025-05-22
CVE-2024-13948 Insecure Permissions — ASPECT-Enterprise CWE-276 7.3 High 2025-05-22
CVE-2024-13947 External System or Configuration Control — ASPECT-Enterprise CWE-863 6.0 Medium 2025-05-22
CVE-2024-13946 Binary Planting / LoadLibrary DLL's not Signed — ASPECT-Enterprise CWE-427 6.8 Medium 2025-05-22
CVE-2024-13931 Authenticated Relative Path Traversal — ASPECT-Enterprise CWE-606 7.2 High 2025-05-22
CVE-2024-13930 Authenticated Unchecked Loop Condition — ASPECT-Enterprise CWE-606 4.9 Medium 2025-05-22
CVE-2024-13929 Authenticated Servlet Command Injection — ASPECT-Enterprise CWE-94 7.2 High 2025-05-22
CVE-2024-13928 Authenticated SQL Injection — ASPECT-Enterprise CWE-94 7.2 High 2025-05-22
CVE-2025-30169 Admin Authorized File Upload and Execute PHP — ASPECT-Enterprise CWE-434 6.7 Medium 2025-05-22
CVE-2025-30173 Admin Authorized File Upload — ASPECT-Enterprise CWE-434 6.7 Medium 2025-05-22
CVE-2025-30172 Admin Authorized Remote Code Execution — ASPECT-Enterprise CWE-94 8.0 High 2025-05-22
CVE-2025-30171 Admin Authorized System File Deletion — ASPECT-Enterprise CWE-863 9.0 Critical 2025-05-22
CVE-2025-30170 Admin Authorized Exposure of file path, file size or file existence — ASPECT-Enterprise CWE-497 5.5 Medium 2025-05-22
CVE-2025-2409 Admin Authorized System File corruption — ASPECT-Enterprise CWE-73 9.1 Critical 2025-05-22
CVE-2025-2410 Admin Authorized Port (iptables) manipulation (open/close/disable ports) — ASPECT-Enterprise CWE-99 9.1 Critical 2025-05-22
CVE-2024-9639 Authenticated Remote Code Execution — ASPECT-Enterprise CWE-94 8.0 High 2025-05-22
CVE-2024-48850 Authenticated Absolute Path Traversal — ASPECT-Enterprise CWE-36 7.2 High 2025-05-22

This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.