ABB PSIRT
organization01
references
Other names and identifiers for this entity.
abb_psirtCH https://global.abb/group/en/technology/cyber-security
02
assessed vulnerabilities (300)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-13599US | —OT elevated | — | ||
Missing authentication for critical function vulnerability in ABB Ability Edgenius.
This issue affects Ability Edgenius: through 3.2.3.0. | ||||
| CVE-2026-17525US | — | — | ||
Incomplete cleanup vulnerability in ABB My Control System.
This issue affects My Control System: 26.4 and 26.5. | ||||
| CVE-2026-15953US | — | — | ||
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and… | ||||
| CVE-2026-15952US | — | — | ||
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and control IED manager (PCM6… | ||||
| CVE-2026-19438US | — | — | ||
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Mint Workbench I.
This issue affects Mint Workbench I: through 5876. | ||||
| CVE-2023-5778US | — | — | ||
Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freelance… | ||||
| CVE-2026-79679US | — | — | ||
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services.
This issue affects mapp Audit used in mapp Services: before 6.8.0. | ||||
| CVE-2026-81576US | — | — | ||
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak
SID as sole authenticator. An attac… | ||||
| CVE-2026-81575US | — | — | ||
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and
the data itself. Missing bounds che… | ||||
| CVE-2026-81574US | — | — | ||
In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format
specifiers. Thi… | ||||
| CVE-2026-81573US | —OT elevated | — | ||
If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network-
origin restrictions. Commands intended only for loc… | ||||
| CVE-2026-81572US | — | — | ||
In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The… | ||||
| CVE-2026-18963US | — | Exploit | ||
A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The iss… | ||||
| CVE-2026-12705US | — | — | ||
Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE).
This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update To… | ||||
| CVE-2026-6901US | — | — | ||
Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL.
This issue affects APROL: before R 4.4-01P5. | ||||
| CVE-2026-6900US | — | — | ||
Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL.
This issue affects APROL: before R 4.4-01P5. | ||||
| CVE-2025-13162US | — | — | ||
Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master.
This issue affects Control Builder A: through 1.4/4; 800xA for Advant Master:… | ||||
| CVE-2025-7064US | — | — | ||
Authentication bypass by primary weakness vulnerability in ABB Freelance.
This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024. | ||||
| CVE-2025-14774US | —OT elevated | — | ||
Incorrect Authorization vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24. | ||||
| CVE-2025-14773US | medium5.4 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24. | ||||