Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ABB — Vulnerabilities & Security Advisories 225

Browse all 225 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.

CVE ID Title CVSS Severity Published
CVE-2024-13948 Insecure Permissions — ASPECT-Enterprise CWE-276 7.3 High 2025-05-22
CVE-2024-13947 External System or Configuration Control — ASPECT-Enterprise CWE-863 6.0 Medium 2025-05-22
CVE-2024-13946 Binary Planting / LoadLibrary DLL's not Signed — ASPECT-Enterprise CWE-427 6.8 Medium 2025-05-22
CVE-2024-13931 Authenticated Relative Path Traversal — ASPECT-Enterprise CWE-606 7.2 High 2025-05-22
CVE-2024-13930 Authenticated Unchecked Loop Condition — ASPECT-Enterprise CWE-606 4.9 Medium 2025-05-22
CVE-2024-13929 Authenticated Servlet Command Injection — ASPECT-Enterprise CWE-94 7.2 High 2025-05-22
CVE-2024-13928 Authenticated SQL Injection — ASPECT-Enterprise CWE-94 7.2 High 2025-05-22
CVE-2025-30169 Admin Authorized File Upload and Execute PHP — ASPECT-Enterprise CWE-434 6.7 Medium 2025-05-22
CVE-2025-30173 Admin Authorized File Upload — ASPECT-Enterprise CWE-434 6.7 Medium 2025-05-22
CVE-2025-30172 Admin Authorized Remote Code Execution — ASPECT-Enterprise CWE-94 8.0 High 2025-05-22
CVE-2025-30171 Admin Authorized System File Deletion — ASPECT-Enterprise CWE-863 9.0 Critical 2025-05-22
CVE-2025-30170 Admin Authorized Exposure of file path, file size or file existence — ASPECT-Enterprise CWE-497 5.5 Medium 2025-05-22
CVE-2025-2409 Admin Authorized System File corruption — ASPECT-Enterprise CWE-73 9.1 Critical 2025-05-22
CVE-2025-2410 Admin Authorized Port (iptables) manipulation (open/close/disable ports) — ASPECT-Enterprise CWE-99 9.1 Critical 2025-05-22
CVE-2024-9639 Authenticated Remote Code Execution — ASPECT-Enterprise CWE-94 8.0 High 2025-05-22
CVE-2024-48850 Authenticated Absolute Path Traversal — ASPECT-Enterprise CWE-36 7.2 High 2025-05-22
CVE-2024-48853 Authenticated Escalation to guest to root — ASPECT-Enterprise CWE-286 9.0 Critical 2025-05-22
CVE-2024-9877 Sensitive information submitted using GET method — ANC CWE-598 4.3 Medium 2025-04-30
CVE-2024-9876 Application is vulnerable to Privilege escalation — ANC CWE-471 7.3 High 2025-04-30
CVE-2024-47784 Unverified Password Change — ANC CWE-620 2.6 Low 2025-04-30
CVE-2025-3395 ABB Automation Builder 安全漏洞 — Automation Builder CWE-732 7.1 High 2025-04-30
CVE-2025-3394 Vulnerability in user management of Automation Builder — Automation Builder CWE-732 7.8 High 2025-04-30
CVE-2024-10334 Camera passwords stored in clear text — System 800xA CWE-256 7.3 High 2025-02-10
CVE-2024-51547 Credentials Disclosure - keys — ASPECT-Enterprise CWE-798 9.8 Critical 2025-02-06
CVE-2024-48852 Information disclosures — FLXEON CWE-532 9.4 Critical 2025-01-29
CVE-2024-48849 Authentication and Authorization Issues — FLXEON CWE-1385 9.4 Critical 2025-01-29
CVE-2024-48841 Remote Code Execution (RCE) Vulnerabilities — FLXEON CWE-77 10.0 Critical 2025-01-27
CVE-2024-12429 ABB AC500 路径遍历漏洞 — AC500 V3 CWE-22 4.3 Medium 2025-01-07
CVE-2024-12430 ABB AC500 安全漏洞 — AC500 V3 CWE-280 7.0 High 2025-01-07
CVE-2024-51555 Force Change of Default Credentials — ASPECT-Enterprise CWE-1393 10.0 Critical 2024-12-05

This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.