ABB vulnerabilities
We track 89 vulnerabilities in ABB products across 60+ products. 89 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.
Latest ABB vulnerabilities
- 9.8 Critical severity
RMC-100 (Standard): Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller products of ABB ( RMC-100 (Standard), RMC-1
- 7.8 High severity
Drive Composer entry: Improper Link Resolution Before File Access
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileg
- 7.8 High severity
Drive Composer entry: Improper Link Resolution Before File Access
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileg
- 7.8 High severity
Drive Composer entry: Improper Link Resolution Before File Access
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileg
- 7.8 High severity
Drive Composer entry: Improper Link Resolution Before File Access
Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileg
- 7.8 High severity
Mint WorkBench: Improper Privilege Management
Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileg
- 7.8 High severity
e-Design: Incorrect Default Permissions
Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine.
- 9.8 Critical severity
ABB ARG600 Wireless Gateway series: Improper Initialization
A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.
- 7.5 High severity
RTU500 series CMU Firmware: Improper Validation of Specified Quantity in Input
A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the