Most recent entries from csaf_abb

3ADR011566 — ABB Automation Builder - Deserialization of untrusted data

2026-09-28T00:30:00+00:00

ABB is aware of vulnerabilities in the products versions listed as affected in the advisory.

Automation Builder could execute arbitrary code by crafting the project file or project archive file.

3ADR011565 — AC500 V3 - Invalid type usage in visualization

2026-09-28T00:30:00+00:00

An update is available that resolves publicly reported vulnerability in the products versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could cause a denial-of-service (DoS).

2NGA003179 — ABB Protection and Control IED Manager (PCM600) - PCM600 Project Import Path Traversal

2026-09-28T00:30:00+00:00

ABB is aware of a privately reported vulnerability affecting the PCM600 project import functionality. An update is available that resolves this vulnerability in the affected product versions.

A specially crafted PCM600 project archive may exploit insufficient validation of archive entry paths during project import. Successful exploitation could allow an attacker to create or overwrite files outside the intended extraction directory using the permissions of the importing user.

2NGA003170 — ABB Protection and Control IED Manager PCM600 Scheduler Service Privilege Escalation Vulnerability

2026-09-28T00:30:00+00:00

ABB is aware of a reported vulnerability in ABB Protection and Control IED Manager (PCM600).

A local authenticated user belonging to the PCM600 user group may be able to modify the configuration of a Windows service running with SYSTEM privileges. Successful exploitation could allow an attacker to execute arbitrary commands with elevated privileges on the affected workstation.

Note: This document references the ABBPCMSchedulerService_v214 component as implemented in PCM600 version 2.14. However, the described issue is not version-specific and applies equally to the corresponding component in other supported versions of PCM600.

9AKK108473A3188 — Mint Workbench I Path traversal Vulnerability

2026-09-29T00:30:00+00:00

A local attacker who successfully exploited this vulnerability could gain elevated privileges by Path Traversal, arbitrarily reading files of system, to cause confidentiality impact of system files.

7PAA010706 — Freelance Missing Length Check

2026-09-18T00:30:00+00:00

ABB is aware of a vulnerability in the product versions listed as affected in the advisory. An update is available that resolves the reported vulnerability in the product versions under maintenance.

An attacker who successfully exploited this vulnerability could cause the product to stop or make the product inaccessible.

4JDE002044 — dynovaPRO™ Reset Credentials Vulnerability

2026-09-17T00:30:00+00:00

ABB is aware of public reports of a vulnerability in the product listed as affected in the advisory. An update has been deployed to the cloud system that resolves a publicly reported vulnerability in the product versions listed above.

An attacker who successfully exploited this vulnerability could take remote control of the product.

The vulnerability has been identified in the keycloak authentication component which is integrated into dynovaPRO™. The vulnerability exists in the 'Forgot Password' functionality and allows unauthenticated attackers to bypass authentication and hijack user accounts.

Users who have received a password reset mail before the mentioned date, without having requested it, are thereby potentially attacked by exploiting this vulnerability.

ABB investigated potentially malicious user reset activities and blocked those user access immediately to reduce the exploitation risk. The credentials of those users have been deleted after the software fix was deployed and the users were informed that they must reset their password to gain access to dynovaPRO™ again.

3BHS973333 — AC 800PEC, AC 800PEC ARM, AC 800PEC Tool, Control Terminal (xCT) and AC 800PEC Tool Cheetah Impacted by multiple vulner…

2026-09-10T00:30:00+00:00

An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could

- Allow arbitrary files to be deleted with system privileges (CVE-2026-81572), - Read potentially sensitive configuration data and overwrite selected values in Server.ini (CVE-2026-81573) - Crash CodeMeter and disclose sensitive information such as process memory and stack canar-ies (CVE-2026-81574) - Crash CodeMeter (CVE-2026-81575), or - Read potentially sensitive license information (CVE-2026-81576)

2NGA003144 — ABB AbilityTM zenon Security Risk Due to High-Severity Vulnerabilities in WIBU CodeMeter Runtime

2026-09-09T00:30:00+00:00

ABB is aware of publicly disclosed security vulnerabilities affecting the WIBU-Systems CodeMeter Runtime for Windows, identified as CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575 and CVE-2026-81576. The CodeMeter Runtime component is used within affected ABB zenon Software Platform installations for software licensing and license server functionality. Successful exploitation of the reported vulnerabilities could enable local privilege escalation on Windows systems and impact systems configured as CodeMeter license servers, potentially leading to unauthorized access, service disruption, or loss of system integrity. Refer to the WIBU-Systems advisory for detailed technical information on each vulnerability. Please see the References section for the WIBU-Systems security advisory.

SA26P012 — mapp Services Use of Weak Authenticators in mapp Audit

2026-09-03T00:30:00+00:00

An update is available that resolves a vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploits this vulnerability could gain access to the OPC UA server component on affected devices due to insufficient entropy of authenticators used by mapp Audit.