Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

ABB — Vulnerabilities & Security Advisories 217

Browse all 217 CVE security advisories affecting ABB. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ABB operates as a global leader in electrification and industrial automation, providing critical infrastructure for power grids, manufacturing, and transportation. With 211 recorded Common Vulnerabilities and Exposures (CVEs), the company’s software and hardware ecosystems have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from legacy industrial control systems and web-based management interfaces, exposing operational technology to potential compromise. Notable incidents include the discovery of hardcoded credentials and unpatched firmware in various PLCs and HMIs, which attackers have exploited to gain unauthorized network access. The sheer volume of CVEs highlights significant challenges in maintaining security across diverse, long-lifecycle products. While ABB implements security updates, the complexity of its integrated solutions continues to present persistent risks for industrial environments relying on its technology.

CVE IDTitleCVSSSeverityPublished
CVE-2020-8478 ABB System 800xA Inter process communication vulnerability — OPC Server for AC 800MCWE-264 5.3 Medium2020-04-29
CVE-2020-8481 ABB Central Licensing System - Information disclosure — Central Licensing SystemCWE-200 9.8 Critical2020-04-29
CVE-2020-8471 ABB Central Licensing System - Weak File Permissions — Central Licensing SystemCWE-275 7.8 High2020-04-29
CVE-2020-8475 ABB Central Licensing System - Denial of Service Vulnerability — Central Licensing SystemCWE-20 5.3 Medium2020-04-29
CVE-2020-8476 ABB Central Licensing System - Elevation of Privilege Vulnerability — Central Licensing SystemCWE-20 5.3 Medium2020-04-29
CVE-2020-8479 ABB Central Licensing System - XML External Entity Injection — Central Licensing SystemCWE-91 9.4 Critical2020-04-29
CVE-2020-8473 ABB System 800xA Weak File Permissions - ABB System 800xA Base — System 800xA BaseCWE-732 7.3 High2020-04-28
CVE-2020-8472 ABB System 800xA Weak File Permissions - different products — OPC Server for AC 800MCWE-732 5.5 Medium2020-04-28
CVE-2020-8477 ABB System 800xA Information Manager Remote Code Execution — System 800xA Information ManagerCWE-79 8.8 High2020-04-22
CVE-2019-19107 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure — TG/S 3.2 Telephone GatewayCWE-264 6.2 Medium2020-04-22
CVE-2019-19106 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues — TG/S 3.2 Telephone GatewayCWE-264 9.1 Critical2020-04-22
CVE-2019-19105 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials — TG/S 3.2 Telephone GatewayCWE-256 6.2 Medium2020-04-22
CVE-2019-19104 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control — TG/S 3.2 Telephone GatewayCWE-287 9.1 Critical2020-04-22
CVE-2020-8474 ABB System 800xA Weak Registry Permissions — System 800xA BaseCWE-275 7.8 High2020-04-22
CVE-2019-19002 ABB eSOMS X-XSS-Protection not enabled — eSOMSCWE-16 6.3 Medium2020-04-02
CVE-2019-19001 eSOMS X-FrameOption — eSOMSCWE-16 6.5 Medium2020-04-02
CVE-2019-19000 eSOMS Cachecontrol (Pragma) HTTP Header — eSOMSCWE-16 6.5 Medium2020-04-02
CVE-2019-19097 ABB eSOMS: SSL medium strength Cipher Suites — eSOMSCWE-16 5.9 Medium2020-04-02
CVE-2019-19096 ABB eSOMS: REDIS clear text credentials — eSOMSCWE-257 6.1 Medium2020-04-02
CVE-2019-19095 ABB eSOMS: Stored XSS vulnerability — eSOMSCWE-20 5.4 Medium2020-04-02
CVE-2019-19094 ABB eSOMS: SQL injection vulnerability — eSOMSCWE-89 7.6 High2020-04-02
CVE-2019-19093 ABB eSOMS: Password complexity issue — eSOMSCWE-521 6.5 Medium2020-04-02
CVE-2019-19092 ABB eSOMS: Viewstate without MAC Signature — eSOMSCWE-16 3.5 Low2020-04-02
CVE-2019-19091 ABB eSOMS: HTTP response information leakage — eSOMSCWE-16 4.3 Medium2020-04-02
CVE-2019-19090 ABB eSOMS: Secure Flag not set — eSOMSCWE-16 3.5 Low2020-04-02
CVE-2019-19089 eSOMS: X-Content-Type-Options Header Missing — eSOMSCWE-16 6.1 Medium2020-04-02
CVE-2019-19003 ABB eSOMS: HTTPOnly flag not set — eSOMSCWE-16 5.3 Medium2020-04-02
CVE-2019-18998 Asset Suite Direct Object Reference Access — Asset SuiteCWE-284 7.1 High2020-02-17
CVE-2019-18996 ABB PB610 HMIStudio accepts malicious DLL file in an application — PB610 Panel Builder 600CWE-424 7.1 High2019-12-18
CVE-2019-18997 PB610 HMISimulator provides interface with access to arbitrary files — PB610 Panel Builder 600CWE-424 4.3 Medium2019-12-18

This page lists every published CVE security advisory associated with ABB. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.