CVEs we hold for Abb

Records whose assigning authority named Abb as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-12705Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update ToolABB KNX Update Tool (BJE)

CVE-2025-9970Application credential stored in clear text in memoryABB MConfig

CVE-2025-9574Missing Authentication VulnerabilityABB ALS-mini-s8 IP

CVE-2025-8754ABB AbilityTM zenon Remote Transport VulnerabilityABB AbilityTM zenon

CVE-2025-7745Modbus TCP buffer overreadABB AC500 V2

CVE-2025-7705Authentication bypass due to compatibility mode enabled by defaultABB Switch actuator, door/light 4 DU -83330-500

CVE-2025-7679Session ID Basic Auth BypassABB Aspect

CVE-2025-7677DOS attack possibleABB Aspect

CVE-2025-7064Freelance Security Lock – Access to Windows OSABB Freelance

CVE-2025-6074Authentication Bypass to the MQTT configuration Web InterfaceABB RMC-100 LITE

CVE-2025-6073Stack Buffer Overflow in MQTTCoreABB RMC-100 LITE

CVE-2025-6072Stack Buffer Overflow in MQTTCoreABB RMC-100 LITE

CVE-2025-6071Hard Coded Key used for AES encryptionABB RMC-100 LITE

CVE-2025-5517Heap Memory Corruption VulnerabilityABB Terra AC wallbox (JP)

CVE-2025-53187Unauthenticated RCEABB ASPECT

CVE-2025-4677Idle session timeout is not configured for multiple open portsABB WebPro SNMP Card PowerValue UL

CVE-2025-4676Authentication bypass by brute forcing Authentication HeadersABB WebPro SNMP Card PowerValue UL

CVE-2025-4675Improper implementation of Modbus protocol leading to DOS attackABB WebPro SNMP Card PowerValue UL

CVE-2025-4407Application does not invalidate session after password resetABB Lite Panel Pro

CVE-2025-3756Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850ABB S+ Operations

CVE-2025-3465Path Traversal VulnerabilityABB CoreSense™ M10

CVE-2025-3395no title heldABB Automation Builder

CVE-2025-3394Vulnerability in user management of Automation BuilderABB Automation Builder

CVE-2025-30173Admin Authorized File UploadABB MATRIX Series

CVE-2025-30172Admin Authorized Remote Code ExecutionABB MATRIX Series

CVE-2025-30171Admin Authorized System File DeletionABB MATRIX Series

CVE-2025-30170Admin Authorized Exposure of file path, file size or file existenceABB MATRIX Series

CVE-2025-30169Admin Authorized File Upload and Execute PHPABB MATRIX Series

CVE-2025-2410Admin Authorized Port (iptables) manipulation (open/close/disable ports)ABB MATRIX Series

CVE-2025-2409Admin Authorized System File corruptionABB MATRIX Series

CVE-2025-14774Communication analysis between the Card Reader and TP2CardReaderService daemonABB T-MAC Plus

CVE-2025-14773Stored Cross-Site Scripting in ABB T-MAC Plus web applicationABB T-MAC Plus

CVE-2025-14772Broken Access Control in ABB T-MAC Plus web applicationABB T-MAC Plus

CVE-2025-14771File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web SiteABB T-MAC Plus

CVE-2025-14510ABB Ability OPTIMAX Authentication Bypass in Single-Sign OnABB Ability OPTIMAX

CVE-2025-13779Configuration Data SpillABB AWIN GW120

CVE-2025-13778Device Reboot ControlABB AWIN GW120

CVE-2025-13777Authentication Bypass due to Improper Session ValidationABB AWIN GW120

CVE-2025-13162Advant Master Online Builder DLL vulnerabilityABB 800xA for Advant Master

CVE-2025-12143Stack Memory Corruption VulnerabilityABB Terra AC wallbox

CVE-2025-12142BSS(Block Started by Symbol) Memory Corruption VulnerabilityABB Terra AC wallbox

CVE-2025-10571ABB Ability Edgenius Authentication BypassABB Ability Edgenius

CVE-2025-10504Heap Memory Corruption VulnerabilityABB Terra AC wallbox

CVE-2025-10207Authenticated File Disclosure/DeleteABB FLXEON

CVE-2025-10205Predictable Salt and Weak Hashing AlgorithmABB FLXEON

CVE-2024-9877Sensitive information submitted using GET methodABB ANC-mini

CVE-2024-9876Application is vulnerable to Privilege escalationABB ANC-mini

CVE-2024-9639Authenticated Remote Code ExecutionABB MATRIX Series

CVE-2024-8036Unauthorized Modifications of Firmware and ConfigurationABB REC603/RER603

CVE-2024-6784SSRF Server Side Request ForgeryABB MATRIX Series

CVE-2024-6516Cross Site Scripting XSSABB MATRIX Series

CVE-2024-6515unauthorized file accessABB MATRIX Series

CVE-2024-6298remote code executionABB MATRIX Series

CVE-2024-6209unauthorized file accessABB MATRIX Series

CVE-2024-6157no title heldABB RobotWare 6

CVE-2024-5402Mint Workbench I Unquoted Service Path EnumerationABB Mint Workbench I

CVE-2024-51555Force Change of Default CredentialsABB MATRIX Series

CVE-2024-51554off-by-one-errorABB MATRIX Series

CVE-2024-51553Predictable FilenameABB MATRIX Series

CVE-2024-51552Weak Password StorageABB MATRIX Series

CVE-2024-51551Default CredentialsABB MATRIX Series

CVE-2024-51550Data Validation / SanitizationABB MATRIX Series

CVE-2024-51549Absolute Path TraversalABB MATRIX Series

CVE-2024-51548Dangerous File UploadABB MATRIX Series

CVE-2024-51547Credentials Disclosure - keysABB MATRIX Series

CVE-2024-51546Credentails DisclosureABB MATRIX Series

CVE-2024-51545Username EnumerationABB MATRIX Series

CVE-2024-51544Service ControlABB MATRIX Series

CVE-2024-51543Information DisclosureABB MATRIX Series

CVE-2024-51542Configuration DownloadABB MATRIX Series

CVE-2024-51541Local File InclusionABB MATRIX Series

CVE-2024-48853Authenticated Escalation to guest to rootABB MATRIX Series

CVE-2024-48852Information disclosuresABB FLXEON

CVE-2024-48851Remote Code ExecutionABB FLXEON

CVE-2024-48850Authenticated Absolute Path TraversalABB MATRIX Series

CVE-2024-48849Authentication and Authorization IssuesABB FLXEON

CVE-2024-48848LARGECONTENT - device disk overutilizationABB MATRIX Series

CVE-2024-48847MD5 bypass operationABB MATRIX Series

CVE-2024-48846Cross Side Request Forgery, CSRFABB MATRIX Series

CVE-2024-48845Weak Password Rules/StrengthABB MATRIX Series

CVE-2024-48844Denial of Service, DoSABB MATRIX Series

CVE-2024-48843Denial of Service, DoSABB MATRIX Series

CVE-2024-48842Hardcoded passwordsABB FLXEON

CVE-2024-48841Remote Code Execution (RCE) VulnerabilitiesABB FLXEON

CVE-2024-48840Unauthorized AccessABB MATRIX Series

CVE-2024-48839Remote Code Execution, RCEABB MATRIX Series

CVE-2024-47784Unverified Password ChangeABB ANC-mini

CVE-2024-4009Replay Attack in KNX Secure DevicesABB, Busch-Jaeger BCU KNX, BA-U1.0.21

CVE-2024-4008FDSK Leak in KNX Secure DevicesABB, Busch-Jaeger BCU KNX, BA-U1.0.21

CVE-2024-4007Hard coded default credential contained in install packageABB MATRIX Series(MAT-x)

CVE-2024-3036Communication DoS vulnerabilityABB 800xA Base

CVE-2024-1914no title heldABB RobotWare 7

CVE-2024-1913no title heldABB RobotWare 7

CVE-2024-13967ession-Management FailureABB EIBPORT V3 KNX GSM

CVE-2024-13958Stored Cross Site ScriptingABB MATRIX Series

CVE-2024-13957SSRF Server Side Request ForgeryABB MATRIX Series

CVE-2024-13956SSL Verification BypassABB MATRIX Series

CVE-2024-13955SQL Injection 2nd OrderABB MATRIX Series

CVE-2024-13954Serialization / Deserialization of configuration dataABB MATRIX Series

CVE-2024-13953Sensitive Information disclosed in log filesABB MATRIX Series

CVE-2024-13952Remote Code ExecutionABB MATRIX Series

CVE-2024-13951One way hash with predictable saltABB MATRIX Series

CVE-2024-13950Log InjectionABB MATRIX Series

CVE-2024-13949Log ForgingABB MATRIX Series

CVE-2024-13948Insecure PermissionsABB MATRIX Series

CVE-2024-13947External System or Configuration ControlABB MATRIX Series

CVE-2024-13946Binary Planting / LoadLibrary DLL's not SignedABB MATRIX Series

CVE-2024-13945Stored Absolute Path TraversalABB MATRIX Series

CVE-2024-13931Authenticated Relative Path TraversalABB MATRIX Series

CVE-2024-13930Authenticated Unchecked Loop ConditionABB MATRIX Series

CVE-2024-13929Authenticated Servlet Command InjectionABB MATRIX Series

CVE-2024-13928Authenticated SQL InjectionABB MATRIX Series

CVE-2024-12430no title heldABB AC500 V3

CVE-2024-12429no title heldABB AC500 V3

CVE-2024-11317PHP Session FixationABB MATRIX Series

CVE-2024-11316Filesize CheckABB MATRIX Series

CVE-2024-10334Camera passwords stored in clear textABB System 800xA

CVE-2024-0335Malformed Packet HandlingABB Symphony Plus S+ Analyst

CVE-2023-5778Missing Length CheckABB Freelance Controller AC900

CVE-2023-3324Insecure deserialization in zenon internal DLLsABB Ability™ zenon

CVE-2023-3323Code Execution through overwriting project file on zenon engineering studio systemABB Ability™ zenon

CVE-2023-3322Code Execution through overwriting service executable in utilities directoryABB Ability™ zenon

CVE-2023-3321Code Execution through Writable Mosquitto Configuration FileABB Ability™ zenon

CVE-2023-2876Session cookie exposure for client side scriptABB REX640 PCL3

CVE-2023-2685Unquoted Service Path in ABB AO-OPCABB AO-OPC

CVE-2023-1258Flow-X disclosure of sensitive information to unauthenticated usersABB Flow-X

CVE-2023-0864Configuration data is exchanged in plaintext and could be available to a nearby attacker if present during…ABB Terra AC wallbox (JP)

CVE-2023-0863Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed,ABB Terra AC wallbox (JP)

CVE-2023-0636Remote Code Execution via Command InjectionABB Ltd. MATRIX Series

CVE-2023-0635Privilege escalation to rootABB Ltd. MATRIX Series

CVE-2023-0580Information Disclosure vulnerability in My Control System (on-premise)ABB My Control System (on-premise)

CVE-2023-0426Stack overflow in filename or in boundaryABB Freelance controllers AC 900F

CVE-2023-0425Buffer overflow in global memory regionABB Freelance controllers AC 900F

CVE-2023-0228Improper authentication vulnerability in S+ OperationsABB Symphony Plus S+ Operations

CVE-2022-4126Use of Default PasswordABB RCCMD

CVE-2022-34838ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlABB Zenon

CVE-2022-34837ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlABB Zenon

CVE-2022-34836ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlABB Zenon

CVE-2022-3192Improper Check for Unusual or Exceptional ConditionsABB AC500 V2

CVE-2022-31219Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Mint WorkBench

CVE-2022-31218Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Mint WorkBench

CVE-2022-31217Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Mint WorkBench

CVE-2022-31216Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Mint WorkBench

CVE-2022-29483e-Design - Multiple vulnerabilitiesABB e-Design

CVE-2022-28702e-Design - Multiple vulnerabilitiesABB e-Design

CVE-2022-26080Easily guessable session ID's in NE843 Pulsar Plus ControllerABB Infinity DC Power Plant

CVE-2022-26057Mint WorkBench Link Following Local Privilege Escalation VulnerabilityABB Mint WorkBench

CVE-2022-1607Cross Site Scripting vulnerability in NE843 Pulsar Plus ControllerABB Infinity DC Power Plant

CVE-2022-1596ABB Relion REX640 Insufficient file access controlABB REX640 PCL3

CVE-2022-0947Arctic Wireless Gateway Firewall vulnerabilityABB ARG600 Wireless Gateway series

CVE-2022-0902ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root accessABB UDC

CVE-2022-0010QCS 800xA Vulnerability identified in system log filesABB Platform Engineering Tools

CVE-2021-22291EIBPORT Reflected XSSABB EIBPORT V3 KNX GSM

CVE-2021-22288SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet…ABB PNI800

CVE-2021-22286SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet…ABB PNI800

CVE-2021-22285SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet…ABB PNI800

CVE-2021-22284SECURITY - OPC Server for AC 800M - Remote Code Execution VulnerabilityABB Compact Product Suite - Control and I/O OPC Server for…

CVE-2021-22283MMS File Transfer Vulnerability impact on Distribution Automation productsABB Merging Unit- SMU615

CVE-2021-22279OmniCore RobotWare Missing Authentication VulnerabilityABB RobotWare

CVE-2021-22278Certificate verification vulnerability in Update Manager of PCM600 Engineering ToolABB PCM600 Update Manager; Hitachi Energy PCM600…

CVE-2021-22277AC 800M MMS - Denial of Service vulnerability in MMS communicationABB Base Software for SoftControl

CVE-2021-22276free@home System Access Point FW integrity check can be bypassed.ABB System Access Point; Busch-Jaeger System Access Point

CVE-2021-22272ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase.ABB mybuildings.abb.com; Busch-Jaeger my.busch-jaeger.de

CVE-2020-8489ABB System 800xA Inter process communication vulnerability - 800xA Information ManagementABB 800xA Information Management

CVE-2020-8488ABB System 800xA Inter process communication vulnerability - 800xA Batch ManagementABB 800xA Batch Management

CVE-2020-8487ABB System 800xA Inter process communication vulnerability - System 800xA BaseABB System 800xA Base

CVE-2020-8486ABB System 800xA Inter process communication vulnerability - 800xA RNRPABB 800xA RNRP

CVE-2020-8485ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300ABB 800xA for MOD300

CVE-2020-8484ABB System 800xA Inter process communication vulnerability - 800xA for DCIABB 800xA for DCI

CVE-2020-8482ABB Device Library Wizard Information Disclosure VulnerabilityABB Device Library Wizard

CVE-2020-8481ABB Central Licensing System - Information disclosureABB Advant OCS AC 100 OPS Server

CVE-2020-8479ABB Central Licensing System - XML External Entity InjectionABB Ability™ SCADAvantage

CVE-2020-8478ABB System 800xA Inter process communication vulnerabilityABB Base Software for SoftControl

CVE-2020-8477ABB System 800xA Information Manager Remote Code ExecutionABB System 800xA Information Manager

CVE-2020-8476ABB Central Licensing System - Elevation of Privilege VulnerabilityABB Ability™ SCADAvantage

CVE-2020-8475ABB Central Licensing System - Denial of Service VulnerabilityABB Ability™ SCADAvantage

CVE-2020-8474ABB System 800xA Weak Registry PermissionsABB System 800xA Base

CVE-2020-8473ABB System 800xA Weak File Permissions - ABB System 800xA BaseABB System 800xA Base

CVE-2020-8472ABB System 800xA Weak File Permissions - different productsABB Base Software for SoftControl

CVE-2020-8471ABB Central Licensing System - Weak File PermissionsABB Advant OCS AC 100 OPS Server

CVE-2020-24686AC500 V2 webserver denial of service vulnerabilityABB AC500 V2 products with onboard Ethernet

CVE-2020-24685AC500 V2 unauthenticated crafter packet vulnerabilityABB AC500 V2 products with onboard Ethernet

CVE-2020-24683Authentication Bypass in Symphony PlusABB Ability™ Symphony® Plus Operations

CVE-2020-24680Improper Credential Storage in Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24679Denial of Service attack on Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24678Potential Privilege Escalation in Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24677Insecure Web Service in Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24676Insecure Windows Services in Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24675Weak Authentication in Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24674Improper Authorization in Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24673SQL Injection in Symphony PlusABB Ability™ Symphony® Plus Historian

CVE-2020-24672ABB Base Software for SoftControl Remote Code Execution vulnerabilityABB Base Software for SoftControl

CVE-2020-11640Elevation of PrivilegeABB Advant MOD 300 AdvaBuild

CVE-2020-11639Insufficient access control on Inter process communication,ABB Advant MOD 300 AdvaBuild

CVE-2020-10288RVD#3327: No authentication required for accesing ABB IRC5 FTP serverABB IRB140

CVE-2020-10287RVD#3326: Hardcoded default credentials on IRC 5 OPC ServerABB IRB140

CVE-2019-5621ABBS Software Audio Media Player Stack-based Buffer OverflowABBS Software Audio Media Player

CVE-2019-5620ABB MicroSCADA Pro SYS600 Missing Authentication for Critical FunctionABB MicroSCADA Pro SYS600

CVE-2019-19107ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information ExposureABB TG/S 3.2 Telephone Gateway; Busch-Jaeger 6186/11…

CVE-2019-19106ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issuesABB TG/S 3.2 Telephone Gateway; Busch-Jaeger 6186/11…

200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.