Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ABB — Vulnerabilities & Security Advisories 225

Browse all 225 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.

CVE ID Title CVSS Severity Published
CVE-2022-31218 Drive Composer Link Following Local Privilege Escalation Vulnerability — Drive Composer entry CWE-59 7.8 High 2022-06-15
CVE-2022-31217 Drive Composer Link Following Local Privilege Escalation Vulnerability — Drive Composer entry CWE-59 7.8 High 2022-06-15
CVE-2022-31216 Drive Composer Link Following Local Privilege Escalation Vulnerability — Drive Composer entry CWE-59 7.8 High 2022-06-15
CVE-2022-26057 Mint WorkBench Link Following Local Privilege Escalation Vulnerability — Mint WorkBench CWE-269 6.7 Medium 2022-06-15
CVE-2022-29483 e-Design - Multiple vulnerabilities — e-Design CWE-276 7.8 High 2022-05-31
CVE-2022-28702 e-Design - Multiple vulnerabilities — e-Design CWE-276 6.1 Medium 2022-05-31
CVE-2022-0947 Arctic Wireless Gateway Firewall vulnerability — ABB ARG600 Wireless Gateway series CWE-665 9.0 Critical 2022-05-10
CVE-2021-22277 AC 800M MMS - Denial of Service vulnerability in MMS communication — 800xA, Control Software for AC 800M CWE-20 7.5 High 2022-04-01
CVE-2021-22284 SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability — 800xA, Control Software for AC 800M OPC Server for AC 800M CWE-732 8.4 High 2022-02-04
CVE-2021-22285 SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module — SPIET800 CWE-755 7.5 High 2022-02-04
CVE-2021-22288 SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module — SPIET800 CWE-20 7.5 High 2022-02-04
CVE-2021-22286 SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module — SPIET800 CWE-20 7.5 High 2022-02-04
CVE-2021-22279 OmniCore RobotWare Missing Authentication Vulnerability — RobotWare CWE-306 9.8 Critical 2021-12-13
CVE-2021-22278 Certificate verification vulnerability in Update Manager of PCM600 Engineering Tool — PCM600 CWE-295 6.7 Medium 2021-10-28
CVE-2021-22272 ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase. — mybuildings.abb.com CWE-200 6.5 Medium 2021-09-27
CVE-2021-22276 free@home System Access Point FW integrity check can be bypassed. — System Access Point CWE-200 6.1 Medium 2021-09-23
CVE-2020-24672 ABB Base Software for SoftControl Remote Code Execution vulnerability — Base Software for SoftControl CWE-862 9.8 Critical 2021-09-08
CVE-2020-24686 AC500 V2 webserver denial of service vulnerability — AC500 V2 products with onboard Ethernet CWE-400 7.5 High 2021-02-26
CVE-2020-24685 AC500 V2 unauthenticated crafter packet vulnerability — AC500 V2 products with onboard Ethernet 8.6 High 2021-02-09
CVE-2020-24675 Weak Authentication in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-287 9.8 Critical 2020-12-22
CVE-2020-24673 SQL Injection in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-89 9.8 Critical 2020-12-22
CVE-2020-24674 Improper Authorization in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-285 8.8 High 2020-12-22
CVE-2020-24683 Authentication Bypass in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-602 9.8 Critical 2020-12-22
CVE-2020-24680 Improper Credential Storage in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-255 7.0 High 2020-12-22
CVE-2020-24679 Denial of Service attack on Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-20 7.5 High 2020-12-22
CVE-2020-24677 Insecure Web Service in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-754 8.8 High 2020-12-22
CVE-2020-24676 Insecure Windows Services in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-274 7.8 High 2020-12-22
CVE-2020-24678 Potential Privilege Escalation in Symphony Plus — ABB Ability™ Symphony® Plus Operations CWE-269 8.8 High 2020-12-22
CVE-2020-10287 RVD#3326: Hardcoded default credentials on IRC 5 OPC Server — IRB140 CWE-255 9.8 - 2020-07-15
CVE-2020-10288 RVD#3327: No authentication required for accesing ABB IRC5 FTP server — IRB140 CWE-284 9.8 - 2020-07-15

This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.