ABB Protection and Control IED Manager PCM600
view advisory published 2026-10-01
Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or overwrite files.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-15953US | — | — | ||
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and… | ||||
| CVE-2026-15952US | — | — | ||
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and control IED manager (PCM6… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-274-03 JSONself
- ICSA Advisory ICSA-26-274-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationProtection and Control IED Manager PCM600
ABB recommends the following workaround. Although this workaround does not correct the underlying vulnerability, it reduces the risk of privilege escalation.
- MitigationProtection and Control IED Manager PCM600
ABB recommends the following workaround. Although this workaround does not correct the underlying vulnerability, it reduces the risk of privilege escalation.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan