Sign inStart freeBook a demo

Abb vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Abb has 150 published vulnerabilities across 429 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Aspect-Ent-12, with 27. If you run Abb software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Abb products have the most vulnerabilities?

Aspect-Ent-12 leads with 27 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Aspect-Ent-1227
  2. Matrix-21627
  3. Matrix-11 Firmware27
  4. Matrix-1127
  5. Aspect-Ent-96 Firmware27
  6. Aspect-Ent-9627
  7. Aspect-Ent-2 Firmware27
  8. Aspect-Ent-256 Firmware27
  9. Aspect-Ent-25627
  10. Aspect-Ent-227
Published vulnerabilities
Known exploited

Which Abb vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Abb's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Abb flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 52%
    CVE-2019-7232High

    The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request.

    CVSS8.8Published24 Jun 2019
  2. 19%
    CVE-2024-6298Critical

    Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely

    CVSS9.4Published5 Jul 2024
  3. 17%
    CVE-2024-6209Critical

    Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to access files unauthorized

    CVSS9.4Published5 Jul 2024
  4. 17%
    CVE-2022-0902Critical

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller...

    CVSS9.8Published21 Jul 2022
  5. 13%
    CVE-2024-51544High

    Service Control vulnerabilities allow access to service restart requests and vm configuration settings.

    CVSS8.2Published5 Dec 2024
  6. 8.5%
    CVE-2019-7227High

    In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files.

    CVSS7.3Published27 Jun 2019
  7. 8.2%
    CVE-2012-0245Critical

    Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used in ABB Interlink Module, IRC5 OPC Server, PC SDK, PickMaster 3 and 5, RobView 5, RobotStudio,...

    CVSS10.0Published9 Mar 2012
  8. 7.9%
    CVE-2008-2474Critical

    Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2)...

    CVSS10.0Published29 Sep 2008
  9. 6.7%
    CVE-2019-7231Medium

    The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker.

    CVSS5.7Published24 Jun 2019
  10. 5.3%
    CVE-2019-7226High

    The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions.

    CVSS8.8Published27 Jun 2019
Every product

All Abb products we track.

213 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 213 Abb products with at least one tracked version, of 429 in our catalogue.

Precursor Intelligence

Running Abb? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 150 published vulnerabilities across 429 products and 628 versions from Abb.

None of Abb's vulnerabilities is on the list of flaws known to be exploited today.

Aspect-Ent-12, with 27 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Abb products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring