ABB

Products

ProductCVEsExploitedLatest
ASPECT-Enterprise58–May 23, 2025
MATRIX Series58–May 23, 2025
NEXUS Series58–May 23, 2025
ABB Ability™ Symphony® Plus Operations9–Dec 22, 2020
ABB Ability™ Symphony® Plus Historian8–Dec 22, 2020
Symphony Plus S+ Operations7–Apr 3, 2024
FLXEON7–Sep 18, 2025
Control Builder Safe6–Apr 1, 2022
Symphony Plus S+ Engineering6–Apr 3, 2024
Advant OCS AC 100 OPS Server5–Apr 29, 2020
OPC Server for Mod 300 (non-800xA)5–Apr 29, 2020
Compact HMI5–Apr 29, 2020
Harmony OPC Server Standalone5–Apr 29, 2020
AdvaBuild5–Apr 29, 2020
Knowledge Manager5–Apr 29, 2020
Composer CTK5–Apr 29, 2020
Composer Harmony5–Apr 29, 2020
Composer Melody5–Apr 29, 2020
Advant OCS Control Builder A5–Apr 29, 2020
Manufacturing Operations Management5–Apr 29, 2020
RMC-100 LITE5–Jul 3, 2025
Mint WorkBench5–Jun 15, 2022
ABB Ability System 800xA5–Apr 29, 2020
Central Licensing System5–Apr 29, 2020
OPC Data Link5–Apr 29, 2020
Drive Composer entry4–Jun 15, 2022
ABB Ability™ zenon4–Jul 24, 2023
RMC-1004–Jul 3, 2025
ABB Automation Builder4–Jun 15, 2022
T-MAC Plus4–Jun 3, 2026
Drive Composer pro4–Jun 15, 2022
ANC-mini3–Apr 30, 2025
AWIN GW100 rev.23–Mar 13, 2026
RobotWare 63–Oct 10, 2024
Terra AC wallbox (JP)3–Oct 20, 2025
System 800xA Base3–Apr 29, 2020
PNI8003–Feb 4, 2022
AWIN GW1203–Mar 13, 2026
Terra AC wallbox (UL32A)3–Oct 20, 2025
Terra AC wallbox (UL40/80A)3–Oct 20, 2025
ASPECT3–Aug 11, 2025
WebPro SNMP Card PowerValue3–Jan 7, 2026
WebPro SNMP Card PowerValue UL3–Jan 7, 2026
ANC3–Apr 30, 2025
ABB Zenon3–Aug 24, 2022
SPIET8003–Feb 4, 2022
Base Software for SoftControl3–Sep 8, 2021
Terra AC wallbox3–Nov 28, 2025
ANC-L3–Apr 30, 2025
ABB Ability™ SCADAvantage3–Apr 29, 2020
Advant MOD 300 AdvaBuild2–Jul 23, 2024
e-Design2–May 31, 2022
EIBPORT V3 KNX2–Oct 7, 2025
EIBPORT V3 KNX GSM2–Oct 7, 2025
Freelance controllers AC 700F2–Aug 7, 2023
Freelance controllers AC 900F2–Aug 7, 2023
Relion Protection Relays RER6152–Oct 25, 2024
Infinity DC Power Plant2–Mar 16, 2023
IRB1402–Jul 15, 2020
AC500 V22–Jul 24, 2025
REX640 PCL12–Jun 13, 2023
REX640 PCL22–Jun 13, 2023
REX640 PCL32–Jun 13, 2023
Automation Builder2–Apr 30, 2025
RobotWare 72–May 14, 2024
Mint Workbench I2–Sep 23, 2026
MMS Server for AC 800M2–Apr 29, 2020
AC500 V2 products with onboard Ethernet2–Feb 26, 2021
AC500 V32–Jan 7, 2025
OPC Server for AC 800M2–Apr 29, 2020
Terra AC wallbox (CE) Symbiosis2–May 17, 2023
Terra AC wallbox (CE) Terra AC Juno CE2–May 17, 2023
Terra AC wallbox (CE) (Terra AC MID)2–May 17, 2023
Terra AC wallbox (CE) Terra AC PTB 2–May 17, 2023
Protection and control IED manager (PCM600)2–Sep 28, 2026
Pulsar Plus System Controller NE843_S 2–Mar 16, 2023
Relion Protection Relays REF615 IEC1–Oct 25, 2024
Relion Protection Relays REF615R ANSI1–Oct 25, 2024
Relion Protection Relays REX6101–Oct 25, 2024
Relion Protection Relays REX6151–Oct 25, 2024
Relion Protection Relays REX6401–Oct 25, 2024
Relion protection relays - REX640 PCL11–Feb 28, 2023
Relion protection relays - REX640 PCL21–Feb 28, 2023
Relion protection relays - REX640 PCL31–Feb 28, 2023
Remote Monitoring and Control - REC6151–Feb 28, 2023
RER620 ANSI1–Oct 25, 2024
RIO6001–Oct 25, 2024
RMC-100 (Standard)1–Jul 21, 2022
RobotWare1–Dec 13, 2021
S+ Operations1–Apr 13, 2026
Smart Substation Control and Protection SSC6001–Oct 25, 2024
SPA ZC-4001–Oct 25, 2024
SPA ZC-4021–Oct 25, 2024
Substation Merging Unit SMU6151–Oct 25, 2024
SUE 30001–Oct 25, 2024
Switch Actuator 4 DU-833301–Jul 22, 2025
Switch actuator, door/light 4 DU -83330-5001–Jul 22, 2025
Symphony Plus MR (Melody Rack)1–Apr 13, 2026
Symphony Plus S+ Analyst1–Apr 3, 2024
Symphony Plus SD Series1–Apr 13, 2026
System 800xA1–Feb 10, 2025
System 800xA Information Manager1–Apr 22, 2020
System Access Point1–Sep 23, 2021
Terra AC wallbox (MID/ CE) -Terra AC Juno CE1–Oct 20, 2025
Terra AC wallbox (MID/ CE) -Terra AC MID1–Oct 20, 2025
Terra AC wallbox (MID/ CE) -Terra AC PTB1–Oct 20, 2025
UDC1–Jul 21, 2022
uFLOG51–Jul 21, 2022
XFCG51–Jul 21, 2022
XIO1–Jul 21, 2022
620 Series IEC/CN1–Oct 25, 2024
XRCG51–Jul 21, 2022
800xA Base1–Jun 21, 2024
800xA Batch Management1–Apr 29, 2020
800xA, Control Software for AC 800M1–Apr 1, 2022
800xA, Control Software for AC 800M OPC Server for AC 800M1–Feb 4, 2022
800xA for Advant Master1–Jun 23, 2026
800xA for DCI1–Apr 29, 2020
800xA for MOD3001–Apr 29, 2020
800xA Information Management1–Apr 29, 2020
800xA RNRP1–Apr 29, 2020
ABB Ability Edgenius1–Nov 20, 2025
ABB Ability OPTIMAX1–Jan 16, 2026
ABB AbilityTM zenon1–Aug 13, 2025
ABB ARG600 Wireless Gateway series1–May 10, 2022
ABB Base Software for SoftControl1–Apr 1, 2022
ABB Device Library Wizard1–May 29, 2020
Ability Edgenius1–Oct 22, 2026
AC800M (System 800xA)1–Apr 13, 2026
ALS-mini-s4 IP1–Oct 20, 2025
ALS-mini-s8 IP1–Oct 20, 2025
AO-OPC1–Jul 28, 2023
ARG600/ARP600 dual SIM1–Oct 25, 2024
ARG600/ARP600/ARR600/ARC600 single SIM1–Oct 25, 2024
ARM6001–Oct 25, 2024
ASPECT Enterprise (ASP-ENT-x)1–Jul 1, 2024
COM6001–Oct 25, 2024
COM600F ANSI1–Oct 25, 2024
Compact Product Suite - Control and I/O1–Apr 1, 2022
Compact Product Suite - Control and I/O OPC Server for AC 800M1–Feb 4, 2022
Control Builder A1–Jun 23, 2026
Control Builder M Professional1–Apr 28, 2020
Control Builder Safe, version 1.x OPC Server for AC 800M1–Feb 4, 2022
Control Builder Safe, version 2.0 OPC Server for AC 800M1–Feb 4, 2022
CoreSense™ HM1–Oct 20, 2025
CoreSense™ M101–Oct 20, 2025
Flow-X1–Mar 31, 2023
Freelance1–Jun 11, 2026
Freelance Controller AC7001–Sep 18, 2026
Freelance Controller AC8001–Sep 18, 2026
Freelance Controller AC9001–Sep 18, 2026
Freelance Controller DCP1–Sep 18, 2026
KNX Update Tool (ABB)1–Jul 17, 2026
KNX Update Tool (BJE)1–Jul 17, 2026
Lite Panel Pro1–Jun 30, 2025
MATRIX Series(MAT-x)1–Jul 1, 2024
MConfig1–Oct 8, 2025
Merging Unit- SMU6151–Feb 28, 2023
My Control System1–Oct 15, 2026
My Control System (on-premise)1–Apr 6, 2023
mybuildings.abb.com1–Sep 27, 2021
NEXUS Series (NEX-2x, NEXUS-3-x)1–Jul 1, 2024
PCM6001–Oct 28, 2021
PCM600 Update Manager1–Oct 28, 2021
Platform Engineering Tools1–May 22, 2023
QCS 800xA1–May 22, 2023
QCS AC4501–May 22, 2023
RBX6151–Oct 25, 2024
RCCMD1–Mar 27, 2023
RE_6301–Oct 25, 2024
REC601/RER6011–Oct 25, 2024
REC603/RER6031–Oct 25, 2024
REF542plus1–Oct 25, 2024
Relion protection relays - 611 series1–Feb 28, 2023
Relion Protection Relays 615 series ANSI1–Oct 25, 2024
Relion Protection Relays 615 series CN1–Oct 25, 2024
Relion protection relays - 615 series CN 4.0 FP11–Feb 28, 2023
Relion Protection Relays 615 series IEC1–Oct 25, 2024
Relion protection relays - 615 series IEC 4.0 FP11–Feb 28, 2023
Relion protection relays - 615 series IEC 5.01–Feb 28, 2023
Relion protection relays - 615 series IEC 5.0 FP11–Feb 28, 2023
Relion protection relays - 620 series IEC/CN 2.01–Feb 28, 2023
Relion protection relays - 620 series IEC/CN 2.0 FP11–Feb 28, 2023
Relion Protection Relays RE_611 IEC1–Oct 25, 2024
Relion Protection Relays REC6151–Oct 25, 2024
Relion Protection Relays RED615 IEC1–Oct 25, 2024
Relion Protection Relays REF615 ANSI1–Oct 25, 2024

Exploited and recent CVEs

  • CVE-2026-13599 High 7.8 ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB 0.1%
  • CVE-2026-17525 Medium 5.2 My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion 0.1%
  • CVE-2026-15953 Medium 5.0 Path Traversal During Project Archive Import 0.1%
  • CVE-2026-15952 Medium 6.4 Improper Permission Assignment in Scheduler Service <0.1%
  • CVE-2026-19438 High 7.5 Mint Workbench I Path traversal Vulnerability 0.4%
  • CVE-2023-5778 High 7.5 Missing Length Check 0.5%
  • CVE-2023-5778 High 7.5 Missing Length Check 0.5%
  • CVE-2023-5778 High 7.5 Missing Length Check 0.5%
  • CVE-2023-5778 High 7.5 Missing Length Check 0.5%
  • CVE-2026-12705 Medium 6.4 Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool 0.2%
  • CVE-2026-12705 Medium 6.4 Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool 0.2%
  • CVE-2025-13162 Medium 4.4 Advant Master Online Builder DLL vulnerability 0.1%
  • CVE-2025-13162 Medium 4.4 Advant Master Online Builder DLL vulnerability 0.1%
  • CVE-2025-7064 Medium 6.6 Freelance Security Lock – Access to Windows OS 0.1%
  • CVE-2025-14774 High 7.4 Communication analysis between the Card Reader and TP2CardReaderService daemon 0.2%
  • CVE-2025-14773 High 8.0 Stored Cross-Site Scripting in ABB T-MAC Plus web application 0.2%
  • CVE-2025-14772 High 8.8 Broken Access Control in ABB T-MAC Plus web application 0.3%
  • CVE-2025-14771 Critical 9.9 File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site 0.3%
  • CVE-2025-3756 Medium 6.5 Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 0.2%
  • CVE-2025-3756 Medium 6.5 Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 0.2%
  • CVE-2025-3756 Medium 6.5 Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 0.2%
  • CVE-2025-3756 Medium 6.5 Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 0.2%
  • CVE-2025-13779 High 8.3 Configuration Data Spill 0.3%
  • CVE-2025-13779 High 8.3 Configuration Data Spill 0.3%
  • CVE-2025-13778 Medium 6.5 Device Reboot Control 0.3%
  • CVE-2025-13778 Medium 6.5 Device Reboot Control 0.3%
  • CVE-2025-13777 High 8.3 Authentication Bypass due to Improper Session Validation 0.2%
  • CVE-2025-13777 High 8.3 Authentication Bypass due to Improper Session Validation 0.2%
  • CVE-2025-14510 High 8.1 ABB Ability OPTIMAX Authentication Bypass in Single-Sign On 0.4%
  • CVE-2025-4677 Medium 6.5 Idle session timeout is not configured for multiple open ports 0.2%