Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ABB — Vulnerabilities & Security Advisories 225

Browse all 225 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.

CVE ID Title CVSS Severity Published
CVE-2024-4007 Hard coded default credential contained in install package — ASPECT Enterprise (ASP-ENT-x) CWE-1392 8.8 High 2024-07-01
CVE-2024-3036 Communication DoS vulnerability — 800xA Base CWE-1284 5.7 Medium 2024-06-21
CVE-2024-1914 OmniCore robot 代码问题漏洞 — RobotWare 6 CWE-476 6.5 Medium 2024-05-14
CVE-2024-1913 ABB OmniCore robot 缓冲区错误漏洞 — RobotWare 6 CWE-787 7.6 High 2024-05-14
CVE-2024-0335 Malformed Packet Handling — Symphony Plus S+ Operations CWE-23 7.5 High 2024-04-03
CVE-2023-0426 Stack overflow in filename or in boundary — Freelance controllers AC 700F CWE-121 8.6 High 2023-08-07
CVE-2023-0425 Buffer overflow in global memory region — Freelance controllers AC 700F CWE-839 8.6 High 2023-08-07
CVE-2023-2685 Unquoted Service Path in ABB AO-OPC — AO-OPC CWE-428 7.2 High 2023-07-28
CVE-2023-3324 Insecure deserialization in zenon internal DLLs — ABB Ability™ zenon CWE-502 6.3 Medium 2023-07-24
CVE-2023-3323 Code Execution through overwriting project file on zenon engineering studio system — ABB Ability™ zenon CWE-276 5.9 Medium 2023-07-24
CVE-2023-3322 Code Execution through overwriting service executable in utilities directory — ABB Ability™ zenon CWE-732 7.0 High 2023-07-24
CVE-2023-3321 Code Execution through Writable Mosquitto Configuration File — ABB Ability™ zenon CWE-15 7.0 High 2023-07-24
CVE-2023-2876 Session cookie exposure for client side script — REX640 PCL1 CWE-1004 3.1 Low 2023-06-13
CVE-2022-0010 QCS 800xA Vulnerability identified in system log files — QCS 800xA CWE-532 7.8 High 2023-05-22
CVE-2023-0864 Configuration data is exchanged in plaintext and could be available to a nearby attacker if present during configuration or usage of the device via Bluetooth Low Energy (BLE). — Terra AC wallbox (UL40/80A) CWE-319 7.1 High 2023-05-17
CVE-2023-0863 Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed, — Terra AC wallbox (UL40/80A) CWE-287 8.8 High 2023-05-17
CVE-2023-0580 Information Disclosure vulnerability in My Control System (on-premise) — My Control System (on-premise) CWE-922 5.4 Medium 2023-04-06
CVE-2022-3192 Improper Check for Unusual or Exceptional Conditions — AC500 V2 CWE-754 5.3 Medium 2023-03-31
CVE-2023-1258 Flow-X disclosure of sensitive information to unauthenticated users — Flow-X CWE-200 5.3 Medium 2023-03-31
CVE-2022-4126 Use of Default Password — RCCMD CWE-1393 9.6 Critical 2023-03-27
CVE-2022-26080 Easily guessable session ID's in NE843 Pulsar Plus Controller — Pulsar Plus System Controller NE843_S CWE-330 6.3 Medium 2023-03-16
CVE-2023-0228 Improper authentication vulnerability in S+ Operations — Symphony Plus S+ Operations CWE-287 8.8 High 2023-03-02
CVE-2021-22283 MMS File Transfer Vulnerability impact on Distribution Automation products — Relion protection relays - 611 series CWE-665 6.2 Medium 2023-02-28
CVE-2022-1607 Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller — Pulsar Plus System Controller NE843_S CWE-352 4.6 Medium 2023-02-24
CVE-2022-34838 ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control — ABB Zenon CWE-257 8.1 High 2022-08-24
CVE-2022-34836 ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control — ABB Zenon CWE-23 5.9 Medium 2022-08-24
CVE-2022-34837 ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control — ABB Zenon CWE-257 6.2 Medium 2022-08-24
CVE-2022-0902 ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access — RMC-100 (Standard) CWE-22 8.1 High 2022-07-21
CVE-2022-1596 ABB Relion REX640 Insufficient file access control — REX640 PCL1 CWE-732 6.5 Medium 2022-06-21
CVE-2022-31219 Drive Composer Link Following Local Privilege Escalation Vulnerability — Drive Composer entry CWE-59 7.3 High 2022-06-15

This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.