Vulnerabilities > ABB
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-28 | CVE-2023-2685 | Unspecified vulnerability in ABB Ao-Opc 1.0.0/3.2.1 A vulnerability was found in AO-OPC server versions mentioned above. | 6.3 |
| 2023-07-24 | CVE-2023-3321 | Unspecified vulnerability in ABB Zenon A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. | 8.8 |
| 2023-07-24 | CVE-2023-3322 | Unspecified vulnerability in ABB Zenon A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. | 8.1 |
| 2023-07-24 | CVE-2023-3323 | Unspecified vulnerability in ABB Zenon A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. | 5.4 |
| 2023-07-24 | CVE-2023-3324 | Unspecified vulnerability in ABB Zenon A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. | 7.5 |
| 2023-06-28 | CVE-2023-2625 | OS Command Injection vulnerability in ABB Txpert HUB Coretec 4 Firmware A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. | 8.0 |
| 2023-06-13 | CVE-2023-2876 | Incorrect Permission Assignment for Critical Resource vulnerability in ABB products Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX640 PCL2: from 1.0;0 before 1.1.4; REX640 PCL3: from 1.0;0 before 1.2.1. | 6.1 |
| 2023-06-05 | CVE-2023-0635 | Unspecified vulnerability in ABB products Improper Privilege Management vulnerability in ABB Ltd. | 9.8 |
| 2023-06-05 | CVE-2023-0636 | Unspecified vulnerability in ABB products Improper Input Validation vulnerability in ABB Ltd. | 9.8 |
| 2023-05-22 | CVE-2022-0010 | Information Exposure Through Log Files vulnerability in ABB products Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. | 5.5 |