Skip to content
Noroxi

ABB records

162 published records for vendor abb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
11
With a fix record
3.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

162 records
  • CVE-2019-7232
    51Plan

    The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request.

    HighCVSS 8.8No exploitEPSS 52%

    abb · pb610 panel builder 600 firmwareJun 24, 2019

  • CVE-2022-0902
    44Plan

    ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

    CriticalCVSS 9.8No exploitEPSS 16%

    abb · rmc-100 firmwareJul 21, 2022

  • CVE-2024-6298
    43Plan

    remote code execution

    CriticalCVSS 9.4Proof of conceptEPSS 19%

    abb · aspect-ent-12 firmwareJul 5, 2024

  • CVE-2024-6209
    42Plan

    unauthorized file access

    CriticalCVSS 9.4Proof of conceptEPSS 17%

    abb · aspect-ent-12 firmwareJul 5, 2024

  • CVE-2012-0245
    42Plan

    Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used in ABB Interlink Mod

    CriticalCVSS 10.0No exploitEPSS 8%

    abb · interlink moduleMar 9, 2012

  • CVE-2008-2474
    42Plan

    Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitr

    CriticalCVSS 10.0No exploitEPSS 8%

    abb · pcu400Sep 29, 2008

  • CVE-2018-18995
    40Plan

    Pluto Safety PLC Gateway Ethernet devices ABB GATE-E1 and GATE-E2 all versions do not allow authentication to be configured on administrativ

    CriticalCVSS 9.8No exploitEPSS 3%

    abb · gate-e1 firmwareJan 3, 2019

  • CVE-2017-9664
    40Plan

    In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker

    CriticalCVSS 9.8No exploitEPSS 3%

    abb · srea-50 firmwareMay 24, 2018

  • CVE-2017-7931
    40Plan

    In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to acce

    CriticalCVSS 9.8No exploitEPSS 3%

    abb · ip gateway firmwareJun 6, 2018

  • CVE-2020-8479
    40Plan

    ABB Central Licensing System - XML External Entity Injection

    CriticalCVSS 9.8No exploitEPSS 2%

    abb · 800xa systemApr 28, 2020

  • CVE-2020-24679
    40Plan

    Denial of Service attack on Symphony Plus

    CriticalCVSS 9.8No exploitEPSS 2%

    abb · symphony \+ historianDec 22, 2020

  • CVE-2020-8481
    40Plan

    ABB Central Licensing System - Information disclosure

    CriticalCVSS 9.8No exploitEPSS 2%

    abb · 800xa systemApr 28, 2020

  • CVE-2019-18250
    40Plan

    In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication b

    CriticalCVSS 9.8No exploitEPSS 2%

    abb · plant connectNov 25, 2019

  • CVE-2024-51544
    39Monitor

    Service Control vulnerabilities allow access to service restart requests and vm configuration settings.

    HighCVSS 8.8No exploitEPSS 13%

    abb · aspect-ent-12 firmwareDec 5, 2024

  • CVE-2017-7933
    39Monitor

    In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unaut

    CriticalCVSS 9.8No exploitEPSS 2%

    abb · ip gateway firmwareJun 6, 2018

  • CVE-2020-24683
    39Monitor

    Authentication Bypass in Symphony Plus

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · symphony \+ historianDec 22, 2020

  • CVE-2021-22279
    39Monitor

    OmniCore RobotWare Missing Authentication Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · omnicore c30 firmwareDec 13, 2021

  • CVE-2020-10288
    39Monitor

    RVD#3327: No authentication required for accesing ABB IRC5 FTP server

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · robotwareJul 15, 2020

  • CVE-2020-10287
    39Monitor

    RVD#3326: Hardcoded default credentials on IRC 5 OPC Server

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · irb140 firmwareJul 15, 2020

  • CVE-2019-19104
    39Monitor

    ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · tg\/s3.2 firmwareApr 22, 2020

  • CVE-2023-0636
    39Monitor

    Remote Code Execution via Command Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · aspect-ent-2 firmwareJun 5, 2023

  • CVE-2020-24675
    39Monitor

    Weak Authentication in Symphony Plus

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · symphony \+ historianDec 22, 2020

  • CVE-2020-24673
    39Monitor

    SQL Injection in Symphony Plus

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · symphony \+ historianDec 22, 2020

  • CVE-2022-0947
    39Monitor

    Arctic Wireless Gateway Firewall vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · arg600a1220na firmwareMay 10, 2022

  • CVE-2022-4126
    39Monitor

    Use of Default Password

    CriticalCVSS 9.8No exploitEPSS 1%

    abb · rccmdMar 27, 2023