Vulnerabilities in ABB

221 results
Vexday analysis

O portfólio de vulnerabilidades da ABB acumula 218 CVEs catalogadas, das quais 35 são classificadas como críticas e 12 contam com prova de conceito pública disponível, o que representa exposição técnica concreta para equipes de defesa. A taxa de exploração ativa está abaixo da média geral do catálogo KEV, com zero registros confirmados de exploração ativa — dado positivo, mas que não elimina o risco representado por falhas com PoC conhecida. A CVE mais perigosa no cenário atual é CVE-2019-5620, com score EPSS de 0,70, indicando probabilidade relevante de exploração nos próximos 30 dias e merecendo atenção prioritária de patch management. O tipo de falha mais recorrente é CWE-20 (validação inadequada de entrada), padrão estrutural que sugere a necessidade de revisão de práticas de sanitização de dados em múltiplos componentes do portfólio.

CVE-2020-8486MEDIUMABB System 800xA Inter process communication vulnerability - 800xA RNRPEPSS 0.3%CVE-2024-51542HIGHConfiguration DownloadEPSS 0.3%CVE-2024-51541HIGHLocal File InclusionEPSS 0.3%CVE-2025-30171HIGHAdmin Authorized System File DeletionEPSS 0.3%CVE-2022-29483HIGHe-Design - Multiple vulnerabilitiesEPSS 0.3%CVE-2020-8482HIGHABB Device Library Wizard Information Disclosure VulnerabilityEPSS 0.3%CVE-2021-22291HIGHEIBPORT Reflected XSSEPSS 0.3%CVE-2022-31217HIGHDrive Composer Link Following Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2022-31216HIGHDrive Composer Link Following Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2022-31218HIGHDrive Composer Link Following Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-51552HIGHWeak Password StorageEPSS 0.3%CVE-2018-1168—This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attackeEPSS 0.3%CVE-2025-10571CRITICALABB Ability Edgenius Authentication BypassEPSS 0.3%CVE-2023-3322HIGH Code Execution through overwriting service executable in utilities directoryEPSS 0.3%CVE-2022-31219HIGHDrive Composer Link Following Local Privilege Escalation VulnerabilityEPSS 0.3%CVE-2023-3323MEDIUM Code Execution through overwriting project file on zenon engineering studio systemEPSS 0.3%CVE-2019-19105MEDIUMABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentialsEPSS 0.3%CVE-2025-30170MEDIUMAdmin Authorized Exposure of file path, file size or file existenceEPSS 0.3%CVE-2020-8474HIGHABB System 800xA Weak Registry PermissionsEPSS 0.3%CVE-2025-14772HIGHBroken Access Control in ABB T-MAC Plus web applicationEPSS 0.3%