AB
Vendor
Abb
899
CVEs
0
On KEV
2
New 30D
Products
MC9.8
My Control System
ABB
2 CVEs0 on KEV1 new
AE7.8
Ability Edgenius
ABB
1 CVEs0 on KEV1 new
AF10.0
Aspect-ent-12 Firmware
Abb
29 CVEs0 on KEV0 new
AF10.0
Aspect-ent-2 Firmware
Abb
29 CVEs0 on KEV0 new
AF10.0
Aspect-ent-256 Firmware
Abb
29 CVEs0 on KEV0 new
AF10.0
Aspect-ent-96 Firmware
Abb
29 CVEs0 on KEV0 new
MF10.0
Matrix-11 Firmware
Abb
29 CVEs0 on KEV0 new
MF10.0
Matrix-216 Firmware
Abb
29 CVEs0 on KEV0 new
MF10.0
Matrix-232 Firmware
Abb
29 CVEs0 on KEV0 new
MF10.0
Matrix-264 Firmware
Abb
29 CVEs0 on KEV0 new
MF10.0
Matrix-296 Firmware
Abb
29 CVEs0 on KEV0 new
NF10.0
Nexus-2128 Firmware
Abb
29 CVEs0 on KEV0 new
NF10.0
Nexus-264 Firmware
Abb
29 CVEs0 on KEV0 new
NF10.0
Nexus-3-2128 Firmware
Abb
29 CVEs0 on KEV0 new
NF10.0
Nexus-3-264 Firmware
Abb
29 CVEs0 on KEV0 new
NF10.0
Nexus-2128-a Firmware
Abb
28 CVEs0 on KEV0 new
NF10.0
Nexus-2128-f Firmware
Abb
28 CVEs0 on KEV0 new
NF10.0
Nexus-2128-g Firmware
Abb
28 CVEs0 on KEV0 new
NF10.0
Nexus-264-a Firmware
Abb
28 CVEs0 on KEV0 new
NF10.0
Nexus-264-f Firmware
Abb
28 CVEs0 on KEV0 new
NF10.0
Nexus-264-g Firmware
Abb
28 CVEs0 on KEV0 new
SH9.8
Symphony + Historian
Abb
9 CVEs0 on KEV0 new
SO9.8
Symphony + Operations
Abb
9 CVEs0 on KEV0 new
ZE8.8
Zenon
Abb
7 CVEs0 on KEV0 new
AB7.8
Automation Builder
Abb
6 CVEs0 on KEV0 new
MW7.8
Mint Workbench
Abb
6 CVEs0 on KEV0 new
PP8.8
Pb610 Panel Builder 600 Firmware
Abb
6 CVEs0 on KEV0 new
8S9.8
800xa System
Abb
5 CVEs0 on KEV0 new
CB9.8
Control Builder Safe
Abb
5 CVEs0 on KEV0 new
DC7.8
Drive Composer
Abb
5 CVEs0 on KEV0 new
8B7.8
800xa Base System
Abb
4 CVEs0 on KEV0 new
BS9.8
Base Software
Abb
4 CVEs0 on KEV0 new
CH9.8
Compact Hmi
Abb
4 CVEs0 on KEV0 new
PP7.8
Pb610 Panel Builder 600
Abb
4 CVEs0 on KEV0 new
PC6.5
Pcm600
Abb
4 CVEs0 on KEV0 new
TP9.9
T-MAC Plus
ABB
4 CVEs0 on KEV0 new
TF9.8
Tg/s3.2 Firmware
Abb
4 CVEs0 on KEV0 new
807.8
800xa
Abb
3 CVEs0 on KEV0 new
AG8.3
AWIN GW100 rev.2
ABB
3 CVEs0 on KEV0 new
AG8.3
AWIN GW120
ABB
3 CVEs0 on KEV0 new
IG9.8
IP Gateway Firmware
Abb
3 CVEs0 on KEV0 new
PF7.5
Pni800 Firmware
Abb
3 CVEs0 on KEV0 new
RP6.5
Rex640 Pcl1 Firmware
Abb
3 CVEs0 on KEV0 new
RP6.5
Rex640 Pcl2 Firmware
Abb
3 CVEs0 on KEV0 new
RP6.5
Rex640 Pcl3 Firmware
Abb
3 CVEs0 on KEV0 new
RO9.8
Robotware
Abb
3 CVEs0 on KEV0 new
SF7.5
Spiet800 Firmware
Abb
3 CVEs0 on KEV0 new
2F8.8
2tma310010b0001 Firmware
Abb
2 CVEs0 on KEV0 new
2F8.8
2tma310010b0003 Firmware
Abb
2 CVEs0 on KEV0 new
2F8.8
2tma310011b0001 Firmware
Abb
2 CVEs0 on KEV0 new
2F8.8
2tma310011b0002 Firmware
Abb
2 CVEs0 on KEV0 new
2F8.8
2tma310011b0003 Firmware
Abb
2 CVEs0 on KEV0 new
AC8.6
Ac500 Cpu Firmware
Abb
2 CVEs0 on KEV0 new
AV7.0
AC500 V3
ABB
2 CVEs0 on KEV0 new
AF7.5
Ac700f Firmware
Abb
2 CVEs0 on KEV0 new
AD8.8
Advabuild
Abb
2 CVEs0 on KEV0 new
CF8.8
Cp620 Firmware
Abb
2 CVEs0 on KEV0 new
CF8.8
Cp620-web Firmware
Abb
2 CVEs0 on KEV0 new
CF8.8
Cp630 Firmware
Abb
2 CVEs0 on KEV0 new
CF8.8
Cp630-web Firmware
Abb
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-13599 New | AE Ability Edgenius ABB | 7.8 | Oct 22 | ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB |
| CVE-2026-17525 | MC My Control System ABB | 5.2 | Oct 15 | My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion |
| CVE-2026-15953 | PA Protection and control IED manager (PCM600) ABB | 5.0 | Sep 28 | Path Traversal During Project Archive Import |
| CVE-2026-15952 | PA Protection and control IED manager (PCM600) ABB | 6.4 | Sep 28 | Improper Permission Assignment in Scheduler Service |
| CVE-2026-19438 | MW Mint Workbench I ABB | 7.5 | Sep 23 | Mint Workbench I Path traversal Vulnerability |
| CVE-2023-5778 | FC Freelance Controller AC900 ABB | 7.5 | Sep 18 | Missing Length Check |
| CVE-2026-12705 | KU KNX Update Tool (BJE) ABB | 6.4 | Jul 17 | Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool |
| CVE-2025-13162 | CB Control Builder A ABB | 4.4 | Jun 23 | Advant Master Online Builder DLL vulnerability |
| CVE-2025-7064 | FR Freelance ABB | 6.6 | Jun 11 | Freelance Security Lock – Access to Windows OS |
| CVE-2025-14774 | TP T-MAC Plus ABB | 7.4 | Jun 3 | Communication analysis between the Card Reader and TP2CardReaderService daemon |
| CVE-2025-14773 | TP T-MAC Plus ABB | 5.4 | Jun 3 | Stored Cross-Site Scripting in ABB T-MAC Plus web application |
| CVE-2025-14772 | TP T-MAC Plus ABB | 8.8 | Jun 3 | Broken Access Control in ABB T-MAC Plus web application |
| CVE-2025-14771 | TP T-MAC Plus ABB | 9.9 | Jun 3 | File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site |
| CVE-2025-3756 | SO S+ Operations ABB | 6.5 | Apr 13 | Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 |
| CVE-2025-13779 | AG AWIN GW100 rev.2 ABB | 8.3 | Mar 13 | Configuration Data Spill |
| CVE-2025-13778 | AG AWIN GW120 ABB | 6.5 | Mar 13 | Device Reboot Control |
| CVE-2025-13777 | AG AWIN GW120 ABB | 8.3 | Mar 13 | Authentication Bypass due to Improper Session Validation |
| CVE-2025-14510 | AA ABB Ability OPTIMAX ABB | 8.1 | Jan 16 | ABB Ability OPTIMAX Authentication Bypass in Single-Sign On |
| CVE-2025-3395 | AB Automation Builder Abb | 5.5 | Apr 30 | Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder:… |
| CVE-2025-3394 | AB Automation Builder Abb | 7.8 | Apr 30 | Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0 |
| CVE-2024-51547 | NF Nexus-3-2128 Firmware Abb | 9.8 | Feb 6 | Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through… |
| CVE-2024-12429 | AV AC500 V3 ABB | 4.3 | Jan 7 | An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned |
| CVE-2024-12430 | AV AC500 V3 ABB | 7.0 | Jan 7 | An attacker who successfully exploited these vulnerabilities could cause enable command execution |
| CVE-2024-6784 | MF Matrix-264 Firmware Abb | 9.9 | Dec 5 | Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and unintended information disclosure. Affected products: ABB… |
| CVE-2024-6516 | AF Aspect-ent-2 Firmware Abb | 6.1 | Dec 5 | Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser. Affected products: ABB ASPECT - Enterprise… |
| CVE-2024-6515 | AF Aspect-ent-256 Firmware Abb | 8.1 | Dec 5 | Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected… |
| CVE-2024-51554 | NF Nexus-2128-g Firmware Abb | 9.8 | Dec 5 | Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise… |
| CVE-2024-51551 | AF Aspect-ent-2 Firmware Abb | 10.0 | Dec 5 | Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise… |
| CVE-2024-51550 | AF Aspect-ent-12 Firmware Abb | 9.8 | Dec 5 | Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT -… |
| CVE-2024-51549 | AF Aspect-ent-12 Firmware Abb | 9.4 | Dec 5 | Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; … |
| CVE-2024-51548 | AF Aspect-ent-12 Firmware Abb | 8.8 | Dec 5 | Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 |
| CVE-2024-51546 | AF Aspect-ent-2 Firmware Abb | 7.5 | Dec 5 | Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX… |
| CVE-2024-51545 | NF Nexus-2128-f Firmware Abb | 9.8 | Dec 5 | Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: ABB ASPECT - Enterprise v3.08.02; … |
| CVE-2024-51544 | AF Aspect-ent-12 Firmware Abb | 8.2 | Dec 5 | Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… |
| CVE-2024-51543 | AF Aspect-ent-12 Firmware Abb | 7.5 | Dec 5 | Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; … |
| CVE-2024-51542 | AF Aspect-ent-12 Firmware Abb | 8.2 | Dec 5 | Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; … |
| CVE-2024-51541 | AF Aspect-ent-12 Firmware Abb | 7.5 | Dec 5 | Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series… |
| CVE-2024-48847 | AF Aspect-ent-2 Firmware Abb | 9.1 | Dec 5 | MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB… |
| CVE-2024-48846 | AF Aspect-ent-2 Firmware Abb | 7.3 | Dec 5 | Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings. Affected products: ABB ASPECT -… |
| CVE-2024-48845 | AF Aspect-ent-2 Firmware Abb | 9.8 | Dec 5 | Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. … |
| CVE-2024-48844 | AF Aspect-ent-2 Firmware Abb | 6.5 | Dec 5 | Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… |
| CVE-2024-48843 | AF Aspect-ent-2 Firmware Abb | 7.5 | Dec 5 | Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… |
| CVE-2024-48840 | AF Aspect-ent-2 Firmware Abb | 9.8 | Dec 5 | Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 |
| CVE-2024-48839 | AF Aspect-ent-256 Firmware Abb | 9.8 | Dec 5 | Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02 |
| CVE-2024-11317 | MF Matrix-11 Firmware Abb | 10.0 | Dec 5 | Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product. Affected products: … |
| CVE-2024-11316 | AF Aspect-ent-2 Firmware Abb | 7.5 | Dec 5 | Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series… |
| CVE-2020-11640 | AD Advabuild Abb | 8.8 | Jul 23 | AdvaBuild uses a command queue to launch certain operations |
| CVE-2020-11639 | AD Advabuild Abb | 7.8 | Jul 23 | An attacker could exploit the vulnerability by injecting garbage data or specially crafted data |
| CVE-2024-5402 | MW Mint Workbench Abb | 7.8 | Jul 15 | Unquoted Search Path or Element vulnerability in ABB Mint Workbench |
| CVE-2024-6298 | AF Aspect-ent-12 Firmware Abb | 9.8 | Jul 5 | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely |
| CVE-2024-6209 | AF Aspect-ent-12 Firmware Abb | 7.5 | Jul 5 | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized |
| CVE-2024-4007 | NF Nexus-3-264 Firmware Abb | 8.8 | Jul 1 | Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured |
| CVE-2024-3036 | 8B 800xa Base System Abb | 5.7 | Jun 21 | Improper Input Validation vulnerability in ABB 800xA Base |
| CVE-2024-4009 | 2F 2tma310010b0001 Firmware Abb | 7.8 | Jun 5 | Replay Attack in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to capture/replay KNX telegram to local KNX Bus-System |
| CVE-2024-4008 | 2F 2tma310010b0001 Firmware Abb | 8.8 | Jun 5 | FDSK Leak in ABB, Busch-Jaeger, FTS Display (version 1.00) and BCU (version 1.3.0.33) allows attacker to take control via access to local KNX Bus-System |
| CVE-2024-1914 | RO Robotware Abb | 6.5 | May 14 | An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible |
| CVE-2024-1913 | RO Robotware Abb | 7.6 | May 14 | An attacker who successfully exploited these vulnerabilities could cause the robot to stop, make the robot controller inaccessible, or execute arbitrary code. The vulnerability… |
| CVE-2023-0426 | AF Ac700f Firmware Abb | 7.5 | Aug 7 | ABB is aware of vulnerabilities in the product versions listed below |
| CVE-2023-0425 | AF Ac700f Firmware Abb | 7.5 | Aug 7 | ABB is aware of vulnerabilities in the product versions listed below |
| CVE-2023-2685 | AO Ao-opc Abb | 6.3 | Jul 28 | A vulnerability was found in AO-OPC server versions mentioned above |
