CVE-2025-8754

ABB AbilityTM zenon Remote Transport Vulnerability

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon

CVE-2023-3324

Insecure deserialization in zenon internal DLLs

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon

CVE-2023-3323

Code Execution through overwriting project file on zenon engineering studio system

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon

CVE-2023-3322

Code Execution through overwriting service executable in utilities directory

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon

CVE-2023-3321

Code Execution through Writable Mosquitto Configuration File

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon

CVE-2022-34838

ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and corresponding attributes. Once such engineering data is used the data visualization will be altered for the end user.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon

CVE-2022-34837

ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add more network clients that may monitor various activities of the Zenon.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon

CVE-2022-34836

ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Abb

Products

Zenon