CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 25 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool

Missing support for integrity check vulnerability in ABB KNX Update Tool (ABB), ABB KNX Update Tool (BJE). This issue affects KNX Update Tool (ABB): through 2.0.175; KNX Update Tool (BJE): through 2.0.175.

CWE-353Jul 17, 2026
CVSS5.9v4.0EPSS0.098%PoCs0SignalsSTIX

Advant Master Online Builder DLL vulnerability

Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master. This issue affects Control Builder A: through 1.4/4; 800xA for Advant Master: through 6.0.3-1, through 6.1.1-1, 6.1.1-3, 6.2.0-1.

CWE-427Jun 23, 2026
CVSS4.1v4.0EPSS0.083%PoCs0SignalsSTIX

Freelance Security Lock – Access to Windows OS

Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024.

CWE-305Jun 11, 2026
CVSS5.6v4.0EPSS0.116%PoCs0SignalsSTIX

Communication analysis between the Card Reader and TP2CardReaderService daemon

Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

CWE-863Jun 3, 2026
CVSS7.2v4.0EPSS0.18%PoCs0SignalsSTIX

Stored Cross-Site Scripting in ABB T-MAC Plus web application

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

CWE-79Jun 3, 2026
CVSS7.2v4.0EPSS0.181%PoCs0SignalsSTIX

Broken Access Control in ABB T-MAC Plus web application

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

CWE-639Jun 3, 2026
CVSS7.3v4.0EPSS0.292%PoCs0SignalsSTIX

File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

CWE-552Jun 3, 2026
CVSS7.3v4.0EPSS0.347%PoCs0SignalsSTIX

Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.  The System 800xA IEC…

CWE-1284Apr 13, 2026
CVSS7.1v4.0EPSS0.184%PoCs0SignalsSTIX

ABB AWIN GW100 rev.2 and AWIN GW120 Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CWE-306Mar 13, 2026
CVSS7.2v4.0EPSS0.285%PoCs0SignalsSTIX

ABB AWIN GW100 rev.2 and AWIN GW120 Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CWE-306Mar 13, 2026
CVSS7.1v4.0EPSS0.274%PoCs0SignalsSTIX

Authentication Bypass due to Improper Session Validation

Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

CWE-294Mar 13, 2026
CVSS7.2v4.0EPSS0.228%PoCs0SignalsSTIX

ABB Ability OPTIMAX Authentication Bypass in Single-Sign On

Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120.

CWE-303Jan 16, 2026
CVSS9.2v4.0EPSS0.39%PoCs0SignalsSTIX

Idle session timeout is not configured for multiple open ports

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

CWE-613Jan 7, 2026
CVSS7.1v4.0EPSS0.193%PoCs0SignalsSTIX

Authentication bypass by brute forcing Authentication Headers

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

CWE-303Jan 7, 2026
CVSS8.4v4.0EPSS0.255%PoCs0SignalsSTIX

Improper implementation of Modbus protocol leading to DOS attack

Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K.

CWE-754Jan 7, 2026
CVSS7.1v4.0EPSS0.191%PoCs0SignalsSTIX

Stack Memory Corruption Vulnerability

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

CWE-121Nov 28, 2025
CVSS6.9v4.0EPSS0.197%PoCs0SignalsSTIX

ABB Ability Edgenius Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1.

CWE-288Nov 20, 2025
CVSS9.4v4.0EPSS0.314%PoCs0SignalsSTIX

BSS(Block Started by Symbol) Memory Corruption Vulnerability

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

CWE-120Oct 29, 2025
CVSS6.9v4.0EPSS0.202%PoCs0SignalsSTIX

Heap Memory Corruption Vulnerability

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (MID/ CE) -Terra AC MID, ABB Terra AC wallbox (MID/ CE) -Terra AC Juno CE, ABB Terra AC wallbox (MID/ CE) -Terra AC PTB, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): through 1.8.32; Terra AC wallbox (UL32A): through 1.8.2; Terra AC wallbox (MID/ CE) -Terra AC MID: through 1.8.32; Terra AC wallbox (MID/ CE) -Terra AC Juno CE: through 1.8.32; …

CWE-122Oct 20, 2025
CVSS6.1v4.0EPSS0.273%PoCs0SignalsSTIX

Path Traversal Vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12.

CWE-22Oct 20, 2025
CVSS8.2v4.0EPSS0.179%PoCs0SignalsSTIX

Missing Authentication Vulnerability

Missing Authentication for Critical Function vulnerability in ABB ALS-mini-s4 IP, ABB ALS-mini-s8 IP.This issue affects .  All firmware versions with the Serial Number from 2000 to 5166

CWE-306Oct 20, 2025
CVSS9.9v4.0EPSS0.745%PoCs0SignalsSTIX

Application credential stored in clear text in memory

Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21.

CWE-316Oct 8, 2025
CVSS5.7v4.0EPSS0.095%PoCs0SignalsSTIX

EIBPORT Reflected XSS

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.

CWE-79Oct 7, 2025
CVSS8.5v4.0EPSS0.305%PoCs0SignalsSTIX

Heap Memory Corruption Vulnerability

Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

CWE-122Sep 29, 2025
CVSS6.9v4.0EPSS0.202%PoCs0SignalsSTIX

Authenticated File Disclosure/Delete

Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.

CWE-1287Sep 18, 2025
CVSS7.5v4.0EPSS0.33%PoCs0SignalsSTIX