Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ABB — Vulnerabilities & Security Advisories 225

Browse all 225 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.

CVE ID Title CVSS Severity Published
CVE-2025-10207 Authenticated File Disclosure/Delete — FLXEON CWE-1287 7.2 High 2025-09-18
CVE-2024-48851 Remote Code Execution — FLXEON CWE-1287 7.2 High 2025-09-18
CVE-2025-10205 Predictable Salt and Weak Hashing Algorithm — FLXEON CWE-759 8.8 High 2025-09-17
CVE-2024-48842 Hardcoded passwords — FLXEON CWE-798 7.0 High 2025-09-17
CVE-2025-8754 ABB AbilityTM zenon Remote Transport Vulnerability — ABB AbilityTM zenon CWE-306 7.5 High 2025-08-13
CVE-2025-7679 Session ID Basic Auth Bypass — Aspect CWE-306 8.1 High 2025-08-11
CVE-2025-7677 DOS attack possible — Aspect CWE-120 5.9 Medium 2025-08-11
CVE-2025-53187 Unauthenticated RCE — ASPECT CWE-288 9.8 Critical 2025-08-11
CVE-2025-7745 Modbus TCP buffer overread — AC500 V2 CWE-126 5.8 Medium 2025-07-24
CVE-2025-7705 Authentication bypass due to compatibility mode enabled by default — Switch Actuator 4 DU-83330 CWE-489 6.8 Medium 2025-07-22
CVE-2025-6071 Hard Coded Key used for AES encryption — RMC-100 CWE-321 5.3 Medium 2025-07-03
CVE-2025-6072 Stack Buffer Overflow in MQTTCore — RMC-100 CWE-121 7.5 High 2025-07-03
CVE-2025-6073 Stack Buffer Overflow in MQTTCore — RMC-100 CWE-121 7.5 High 2025-07-03
CVE-2025-6074 Authentication Bypass to the MQTT configuration Web Interface — RMC-100 CWE-321 6.5 Medium 2025-07-03
CVE-2025-4407 Application does not invalidate session after password reset — Lite Panel Pro CWE-613 6.7 Medium 2025-06-30
CVE-2024-13967 ession-Management Failure — EIBPORT V3 KNX CWE-384 8.8 High 2025-06-04
CVE-2024-13945 Stored Absolute Path Traversal — ASPECT-Enterprise CWE-36 6.0 Medium 2025-05-23
CVE-2024-51552 Weak Password Storage — ASPECT-Enterprise CWE-257 6.0 Medium 2025-05-22
CVE-2024-13958 Stored Cross Site Scripting — ASPECT-Enterprise CWE-79 4.8 Medium 2025-05-22
CVE-2024-13957 SSRF Server Side Request Forgery — ASPECT-Enterprise CWE-918 7.6 High 2025-05-22
CVE-2024-13956 SSL Verification Bypass — ASPECT-Enterprise CWE-295 6.7 Medium 2025-05-22
CVE-2024-13955 SQL Injection 2nd Order — ASPECT-Enterprise CWE-89 8.8 High 2025-05-22
CVE-2024-13954 Serialization / Deserialization of configuration data — ASPECT-Enterprise CWE-922 6.5 Medium 2025-05-22
CVE-2024-13953 Sensitive Information disclosed in log files — ASPECT-Enterprise CWE-359 4.9 Medium 2025-05-22
CVE-2024-13952 Remote Code Execution — ASPECT-Enterprise CWE-94 8.4 High 2025-05-22
CVE-2024-51553 Predictable Filename — ASPECT-Enterprise CWE-73 6.5 Medium 2025-05-22
CVE-2024-13951 One way hash with predictable salt — ASPECT-Enterprise CWE-760 7.6 High 2025-05-22
CVE-2024-13950 Log Injection — ASPECT-Enterprise CWE-79 6.8 Medium 2025-05-22
CVE-2024-13949 Log Forging — ASPECT-Enterprise CWE-117 6.8 Medium 2025-05-22
CVE-2024-48848 LARGECONTENT - device disk overutilization — ASPECT-Enterprise CWE-774 6.5 Medium 2025-05-22

This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.