Browse all 225 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.
ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-51554 | off-by-one-error — ASPECT-Enterprise CWE-193 | 9.1 | Critical | 2024-12-05 |
| CVE-2024-51551 | Default Credentials — ASPECT-Enterprise CWE-1287 | 10.0 | Critical | 2024-12-05 |
| CVE-2024-51550 | Data Validation / Sanitization — ASPECT-Enterprise CWE-1287 | 10.0 | Critical | 2024-12-05 |
| CVE-2024-51549 | Absolute Path Traversal — ASPECT-Enterprise CWE-36 | 10.0 | Critical | 2024-12-05 |
| CVE-2024-51548 | Dangerous File Upload — ASPECT-Enterprise CWE-434 | 9.9 | Critical | 2024-12-05 |
| CVE-2024-51546 | Credentails Disclosure — ASPECT-Enterprise CWE-1287 | 7.5 | High | 2024-12-05 |
| CVE-2024-51545 | Username Enumeration — ASPECT-Enterprise CWE-522 | 10.0 | Critical | 2024-12-05 |
| CVE-2024-51544 | Service Control — ASPECT-Enterprise CWE-15 | 8.2 | High | 2024-12-05 |
| CVE-2024-51543 | Information Disclosure — ASPECT-Enterprise CWE-15 | 8.2 | High | 2024-12-05 |
| CVE-2024-51542 | Configuration Download — ASPECT-Enterprise CWE-552 | 8.2 | High | 2024-12-05 |
| CVE-2024-51541 | Local File Inclusion — ASPECT-Enterprise CWE-98 | 8.2 | High | 2024-12-05 |
| CVE-2024-48847 | MD5 bypass operation — ASPECT-Enterprise CWE-328 | 8.2 | High | 2024-12-05 |
| CVE-2024-48846 | Cross Side Request Forgery, CSRF — ASPECT-Enterprise CWE-352 | 7.1 | High | 2024-12-05 |
| CVE-2024-48845 | Weak Password Rules/Strength — ASPECT-Enterprise CWE-521 | 9.4 | Critical | 2024-12-05 |
| CVE-2024-48844 | Denial of Service, DoS — ASPECT-Enterprise CWE-770 | 7.7 | High | 2024-12-05 |
| CVE-2024-48843 | Denial of Service, DoS — ASPECT-Enterprise CWE-770 | 7.7 | High | 2024-12-05 |
| CVE-2024-48840 | Unauthorized Access — ASPECT-Enterprise CWE-94 | 10.0 | Critical | 2024-12-05 |
| CVE-2024-48839 | Remote Code Execution, RCE — ASPECT-Enterprise CWE-94 | 10.0 | Critical | 2024-12-05 |
| CVE-2024-11317 | PHP Session Fixation — ASPECT-Enterprise CWE-384 | 10.0 | Critical | 2024-12-05 |
| CVE-2024-11316 | Filesize Check — ASPECT-Enterprise CWE-770 | 7.5 | High | 2024-12-05 |
| CVE-2024-6784 | SSRF Server Side Request Forgery — ASPECT-Enterprise CWE-918 | 9.9 | Critical | 2024-12-05 |
| CVE-2024-6516 | Cross Site Scripting XSS — ASPECT-Enterprise CWE-79 | 9.0 | Critical | 2024-12-05 |
| CVE-2024-6515 | unauthorized file access — ASPECT-Enterprise CWE-319 | 9.6 | Critical | 2024-12-05 |
| CVE-2024-8036 | Unauthorized Modifications of Firmware and Configuration — Relion Protection Relays RE_611 IEC CWE-347 | 5.9 | Medium | 2024-10-25 |
| CVE-2024-6157 | ABB IRC5 RobotWare 代码问题漏洞 — RobotWare 6 CWE-476 | 5.1 | Medium | 2024-10-10 |
| CVE-2020-11640 | Elevation of Privilege — Advant MOD 300 AdvaBuild CWE-269 | 8.8 | High | 2024-07-23 |
| CVE-2020-11639 | Insufficient access control on Inter process communication, — Advant MOD 300 AdvaBuild CWE-924 | 7.8 | High | 2024-07-23 |
| CVE-2024-5402 | Mint Workbench I Unquoted Service Path Enumeration — Mint Workbench I CWE-428 | 7.8 | High | 2024-07-15 |
| CVE-2024-6209 | unauthorized file access — ASPECT-Enterprise CWE-552 | 10.0 | Critical | 2024-07-05 |
| CVE-2024-6298 | remote code execution — ASPECT-Enterprise CWE-1287 | 10.0 | Critical | 2024-07-05 |
This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.