Vendors › ABB

ABB security advisories

4 CISA ICS advisories for ABB in the last tracking window, 3 flagged as relevant to oil & gas. Newest first.

Medium 6.4 Oil & gas relevant ICSA-26-274-03 · Oct 1, 2026 · ABB

ABB Protection and Control IED Manager PCM600

CISA reports 2 vulnerabilities in ABB Protection and Control IED Manager PCM600. Weakness types: Incorrect Permission Assignment for Critical Resource, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). Successful exploitation of these vulnerabilities could allow an attacker to escalate pri…

What to do: Plan: Locate the ABBPCMSchedulerService corresponding to the installed PCM600 version.
High 7.8 Known exploited Oil & gas relevant ICSA-26-260-06 · Sep 17, 2026 · ABB

ABB Ability Edgenius

CISA reports 1 vulnerability in ABB Gateway - bE100, Gateway - E3100C, Server - vE1000. Weakness type: Incorrect Resource Transfer Between Spheres. ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolve…

What to do: Act now: The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
High 7.8 Known exploited Oil & gas relevant ICSA-26-218-01 · Aug 6, 2026 · ABB

ABB Ability Zenon

CISA reports 13 vulnerabilities in ABB Ability Zenon, IIoT services with MongoDB. Weakness types: Improper Handling of Length Parameter Inconsistency, Improper Neutralization of Null Byte or NUL Character, Collapse of Data into Unsafe Value (+9 more). ABB is aware of publicly reported vulnerabilities affecting MongoDB …

What to do: Act now: ABB recommends the following mitigation measures: - Replace bundled MongoDB with a supported version if IIoT services are required: - Where IIoT functionality is required, the bundled MongoDB instance can be replaced with a supported and…
Medium 6.4 ICSA-26-209-07 · Jul 28, 2026 · ABB

ABB KNX Update Tool

CISA reports 1 vulnerability in ABB KNX Update Tool (ABB), KNX Update Tool (BJE). Weakness type: Missing Support for Integrity Check. ABB has been contacted by a researcher who identified a vulnerability in one of its products. ABB has been contacted by a researcher who identified a vulnerability in one of its products…

What to do: Plan: Due to the nature of the classic KNX protocol stack and security concept, there are no options to resolve the vulnerability with a software update on a technical level.