ABB
ABB Investigates PHP2Shell in Netcontrol and NAM Products
ABB is investigating Netcontrol and NAM PHP2Shell exposure without a fix. Restrict or disable web management, isolate assets, and retain evidence.
ABB Warns Obsolete ARM600 and Arctic Gateways Face PHP2Shell
ABB says obsolete ARM600 and Arctic gateways face PHP2Shell without a fix. Isolate or replace them, monitor exposure, and retain evidence.
ABB Warns ASPECT 3.09 and Earlier Are Exposed to PHP2Shell
ABB says ASPECT 3.09 and earlier face PHP2Shell RCE without a complete fix. Remove internet exposure, isolate, monitor, and retain evidence.
ABB Warns APROL R 4.4-65 and Earlier Are Exposed to PHP2Shell
ABB says APROL R 4.4-65 and earlier are exposed to PHP2Shell. Restrict HTTP(S), validate access controls, track patches, and retain evidence.
ABB MES DokuWiki Installations Require Critical PHP Updates
ABB says MES DokuWiki servers require fixed PHP builds. Inventory servers, update PHP packages, validate help workflows, and retain evidence.
ABB My Control System 26.6 Fixes Temporary-File Exhaustion
ABB My Control System 26.6 fixes disk exhaustion from XML temporary files. Confirm deployment type, update or clean up safely, and retain evidence.
CISA Details ABB PCM600 Scheduler Privilege Risks
CISA's PCM600 notice distinguishes Scheduler privilege escalation from project-archive path traversal. Apply the documented service-account workaround under engineering change control, retain certificate safeguards, and do not mark the underlying defect patched merely because the account changed.
ABB PCM600 Scheduler Service Requires Privilege-Escalation Workaround
ABB PCM600 Scheduler has a local privilege-escalation flaw with a documented service-account workaround, not a fixed release. Coordinate changes with the engineering owner and preserve certificate validation; changing accounts does not repair the permission defect.
ABB PCM600 Hotfix Blocks Project-Import Path Traversal
ABB PCM600 2.14 Hotfix 20260923 fixes project-archive path traversal using the importing user's permissions. Restrict untrusted imports while updating; this hotfix does not resolve the separate Scheduler privilege-escalation issue.
ABB AC500 V3 Firmware Fixes Web Visualization Denial of Service
ABB AC500 V3 firmware 3.9.1 fixes denial of service in running web visualization servers. Coordinate controller maintenance with the process owner; updating Automation Builder alone does not prove the controller has received the firmware.