ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB
ABB identified a critical vulnerability present in ABB Ability Edgenius versions 3.2.3.0 and below. We have not received any reports of this vulnerability being exploited. This issue may allow unauthorized manipulation of the edge authentication database if successfully exploited. ABB has developed and released a corrective update that resolves this vulnerability and enhances the security posture of the affected system.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-13599US | —OT elevated | — | ||
Missing authentication for critical function vulnerability in ABB Ability Edgenius.
This issue affects Ability Edgenius: through 3.2.3.0. | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- MitigationAbility Edgenius
The following conditions reduce the likelihood of successful exploitation. For additional guidance, see General security recommendations - Ensure systems are accessible only from trusted networks - Restrict access to edge nodes using firewall rules and network segmentation - Maintain up-to-date patches for OS, firmware, and dependent components - Interact only with trusted applications, software packages, and email attachments - Protect systems from unauthorized physical access
- FixedAbility Edgenius
ABB fixed this vulnerability in ABB Ability Edgenius version 3.2.4.1 and later. Customers should upgrade to version 3.2.4.1 or later as soon as possible
- WorkaroundAbility Edgenius
Workarounds are specific measures that a user can take to help block an attack, for example, temporarily disabling the vulnerable feature may remove exposure with well-known impact on functionality. For brownfield customers, ABB provides a Kubernetes network policy that restricts access to Edge Authentication Database (AuthDB) to the authorized services required for normal operation of an already deployed and configured system. For implementation details, refer to Technical Description-ABB Ability Edgenius Missing Authentication in Edgenius AuthDB.docx (7PAA025722) listed in the reference section, distributed separately.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan