Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how abb compares to other vendors in security performance

View Risk Score →

Software

abb matrix-11
29
abb matrix-11 firmware
29
abb matrix-216
29
abb matrix-216 firmware
29
abb matrix-232
29
abb matrix-264
29
abb matrix-264 firmware
29
abb matrix-296
29
abb nexus-2128 firmware
29
abb nexus-264 firmware
29
abb nexus-3-2128
29
abb nexus-3-264
29
abb nexus-3-264 firmware
29
abb nexus-2128-g
28
abb nexus-264-a firmware
28
abb nexus-264-f
28
abb nexus-264-g firmware
28
abb aspect
21
abb matrix series
21
abb nexus series
21
abb nexus
20
abb nexus 2128-a
20
abb nexus 2128-f
20
abb 800xa
13
abb panel builder 600
11
abb aspect-ent-12
9
abb aspect-ent-12 firmware
9
abb aspect-ent-2
9
abb aspect-ent-2 firmware
9
abb aspect-ent-256
9
abb aspect-ent-256 firmware
9
abb aspect-ent-96
9
abb aspect-ent-96 firmware
9
abb aspect - enterprise
8
abb matrix-232 firmware
8
abb matrix-296 firmware
8
abb nexus-2128
8
abb nexus-264
8
abb nexus-3-2128 firmware
8
abb nexus-2128-a
7
abb nexus-2128-a firmware
7
abb nexus-2128-f
7
abb nexus-2128-f firmware
7
abb nexus-2128-g firmware
7
abb nexus-264-a
7
abb nexus-264-f firmware
7
abb nexus-264-g
7
abb automation builder
6
abb pb610 panel builder 600 firmware
6
abb control builder safe
5

ABB KNX Update Tool (ABB)Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool

Risk 49
Severity
5.9
AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE).

This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update Tool (BJE): through 2.0.175.

First published (updated )
CVE-2026-12705

ABB Control Builder AAdvant Master Online Builder DLL vulnerability

Risk 25
Severity
4.1
AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N

Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master.

This issue affects Control Builder A: through 1.4/4; 800xA for Advant Master: through 6.0.3-1, through 6.1.1-1, 6.1.1-3, 6.2.0-1.

First published (updated )
CVE-2025-13162

ABB FreelanceFreelance Security Lock – Access to Windows OS

Risk 50
Severity
5.6
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Authentication bypass by primary weakness vulnerability in ABB Freelance.

This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024.

First published (updated )
CVE-2025-7064

ABB T-MAC PlusCommunication analysis between the Card Reader and TP2CardReaderService daemon

Risk 43
Severity
7.2
AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Incorrect Authorization vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

First published (updated )
CVE-2025-14774

ABB T-MAC PlusStored Cross-Site Scripting in ABB T-MAC Plus web application

Risk 71
Severity
7.2
XSS
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

First published (updated )
CVE-2025-14773

ABB T-MAC PlusBroken Access Control in ABB T-MAC Plus web application

Risk 79
Severity
7.3
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

First published (updated )
CVE-2025-14772

ABB T-MAC PlusFile Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site

Risk 82
Severity
7.3
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

First published (updated )
CVE-2025-14771

ABB AC800M (System 800xA)Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850

Risk 40
Severity
7.1
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.

The System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.

This issue affects AC800M (System 800xA): from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A0, A1, A2.003, A3.005, A4.001, B0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.

First published (updated )
CVE-2025-3756

ABB AWIN GW100Configuration Data Spill

Risk 69
Severity
7.2
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

First published (updated )
CVE-2025-13779

ABB AWIN GW100Device Reboot Control

Risk 40
Severity
7.1
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

First published (updated )
CVE-2025-13778

ABB AWIN GW100Authentication Bypass due to Improper Session Validation

Risk 69
Severity
7.2
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

First published (updated )
CVE-2025-13777

ABB Ability OPTIMAXABB Ability OPTIMAX Authentication Bypass in Single-Sign On

Risk 76
Severity
9.2
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120.

First published (updated )
CVE-2025-14510

ABB WebPro SNMP Card PowerValueIdle session timeout is not configured for multiple open ports

Risk 40
Severity
7.1
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

First published (updated )
CVE-2025-4677

ABB WebPro SNMP Card PowerValueAuthentication bypass by brute forcing Authentication Headers

Risk 74
Severity
8.8
AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

First published (updated )
CVE-2025-4676

ABB WebPro SNMP Card PowerValueImproper implementation of Modbus protocol leading to DOS attack

Risk 40
Severity
7.1
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

First published (updated )
CVE-2025-4675

ABB Terra AC wallboxStack Memory Corruption Vulnerability

Risk 50
Severity
6.9
Buffer Overflow
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

First published (updated )
CVE-2025-12143

ABB Ability EdgeniusABB Ability Edgenius Authentication Bypass

Risk 81
Severity
9.6
AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1.

Remedy

ABB has prepared an update to fix this vulnerability included in the latest Roll-Up, ABB Ability Edgenius version 3.2.2.0. ABB advises customers to upgrade as soon as possible. Until the upgrade is applied, ABB advises customers to disable the Edgenius Management Portal to mitigate the vulnerability.
First published (updated )
CVE-2025-10571

ABB Terra AC wallboxBSS(Block Started by Symbol) Memory Corruption Vulnerability

Risk 50
Severity
6.9
Buffer Overflow
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

First published (updated )
CVE-2025-12142

ABB Terra AC wallbox UL40/80AHeap Memory Corruption Vulnerability

Risk 52
Severity
6.8
Buffer Overflow
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): through 1.8.32; Terra AC wallbox (UL32A): through 1.8.2; Terra AC wallbox (MID/ CE) -Terra AC MID: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC Juno CE: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC PTB: through 1.8.21; Terra AC wallbox (JP): through 1.8.2.

Remedy

The problem is corrected in the following product versions; apply the following update depending on product variant: * Terra AC wallbox (UL40/80A) 1.8.33 * Terra AC wallbox (UL32A) 1.8.34 * Terra AC MID 1.8.34 * Terra AC Juno CE 1.8.34 * Terra AC PTB 1.8.33 * Terra AC wallbox (JP) 1.8.34
First published (updated )
CVE-2025-5517

ABB CoreSense HMPath Traversal Vulnerability

Risk 43
Severity
8.2
Path Traversal
AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12.

Remedy

The vulnerabilities are corrected in the following version: CoreSense™ HM v2.3.4 CoreSense™ M10 v1.4.1.31
First published (updated )
CVE-2025-3465

ABB ALS-mini-s4 IPMissing Authentication Vulnerability

Risk 61
Severity
10
EPSS
0.09%
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects .

All firmware versions with the Serial Number from 2000 to 5166

First published (updated )
CVE-2025-9574

ABB MConfigApplication credential stored in clear text in memory

Risk 44
Severity
7.4
EPSS
0.01%
AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:H

Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.

First published (updated )
CVE-2025-9970

ABB EIBPORT V3 KNXEIBPORT Reflected XSS

Risk 78
Severity
8.5
XSS
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.

First published (updated )
CVE-2021-22291

ABB Terra AC wallboxHeap Memory Corruption Vulnerability

Risk 50
Severity
6.9
Buffer Overflow
AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

First published (updated )
CVE-2025-10504

ABB FLXEONAuthenticated File Disclosure/Delete

Risk 66
Severity
7.5
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.

First published (updated )
CVE-2025-10207

ABB FLXEONRemote Code Execution

Risk 66
Severity
7.5
Input Validation
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation.

This issue affects FLXEON: through 9.3.5.

First published (updated )
CVE-2024-48851

ABB FLXEONPredictable Salt and Weak Hashing Algorithm

Risk 79
Severity
8.8
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions

First published (updated )
CVE-2025-10205

ABB FLXEONHardcoded passwords

Risk 59
Severity
7.3
AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions

First published (updated )
CVE-2024-48842

ABB AbilityTM zenonABB AbilityTM zenon Remote Transport Vulnerability

Risk 33
Severity
8.7
EPSS
0.06%
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14.

First published (updated )
CVE-2025-8754

ABB AspectUnauthenticated Network Manipulation

Risk 40
Severity
8.4
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

First published (updated )
CVE-2025-53191

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203