Vulnerabilidades en ABB

221 resultados
Análisis Vexday

O portfólio de vulnerabilidades da ABB acumula 218 CVEs catalogadas, das quais 35 são classificadas como críticas e 12 contam com prova de conceito pública disponível, o que representa exposição técnica concreta para equipes de defesa. A taxa de exploração ativa está abaixo da média geral do catálogo KEV, com zero registros confirmados de exploração ativa — dado positivo, mas que não elimina o risco representado por falhas com PoC conhecida. A CVE mais perigosa no cenário atual é CVE-2019-5620, com score EPSS de 0,70, indicando probabilidade relevante de exploração nos próximos 30 dias e merecendo atenção prioritária de patch management. O tipo de falha mais recorrente é CWE-20 (validação inadequada de entrada), padrão estrutural que sugere a necessidade de revisão de práticas de sanitização de dados em múltiplos componentes do portfólio.

CVE-2024-48848HIGHLARGECONTENT - device disk overutilizationEPSS 0.4%CVE-2025-10207HIGHAuthenticated File Disclosure/DeleteEPSS 0.4%CVE-2024-12429MEDIUMAn attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 versioEPSS 0.4%CVE-2024-13953MEDIUMSensitive Information disclosed in log filesEPSS 0.4%CVE-2025-30169MEDIUMAdmin Authorized File Upload and Execute PHPEPSS 0.3%CVE-2025-30173MEDIUMAdmin Authorized File UploadEPSS 0.3%CVE-2025-14771HIGHFile Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web SiteEPSS 0.3%CVE-2023-0228HIGHImproper authentication vulnerability in S+ OperationsEPSS 0.3%CVE-2023-0863HIGHAuthentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed, EPSS 0.3%CVE-2025-6072HIGHStack Buffer Overflow in MQTTCoreEPSS 0.3%CVE-2020-8485HIGHABB System 800xA Inter process communication vulnerability - 800xA for Mod 300EPSS 0.3%CVE-2020-8484HIGHABB System 800xA Inter process communication vulnerability - 800xA for DCIEPSS 0.3%CVE-2020-8478MEDIUMABB System 800xA Inter process communication vulnerabilityEPSS 0.3%CVE-2020-8489HIGHABB System 800xA Inter process communication vulnerability - 800xA Information ManagementEPSS 0.3%CVE-2024-51553HIGHPredictable FilenameEPSS 0.3%CVE-2024-12430HIGHAn attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 veEPSS 0.3%CVE-2024-51543HIGHInformation DisclosureEPSS 0.3%CVE-2025-7677HIGHDOS attack possibleEPSS 0.3%CVE-2023-3324MEDIUM Insecure deserialization in zenon internal DLLsEPSS 0.3%CVE-2020-8487MEDIUMABB System 800xA Inter process communication vulnerability - System 800xA BaseEPSS 0.3%