CVE-2025-3756

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-3756", "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "state": "PUBLISHED", "assignerShortName": "ABB", "dateReserved": "2025-04-17T10:42:33.414Z", "datePublished": "2026-04-13T17:11:08.412Z", "dateUpdated": "2026-04-13T18:03:41.437Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "shortName": "ABB", "dateUpdated": "2026-04-13T17:11:08.412Z"}, "title": "Denial of Service Vulnerabilities in System 800xA, Symphony\u00ae Plus IEC 61850", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1284", "description": "CWE-1284 Improper validation of specified quantity in input", "type": "CWE"}]}], "affected": [{"vendor": "ABB", "product": "AC800M (System 800xA)", "modules": ["CI868"], "versions": [{"status": "affected", "version": "6.0.0x", "lessThanOrEqual": "6.0.0303.0", "versionType": "custom"}, {"status": "affected", "version": "6.1.0x", "lessThanOrEqual": "6.1.0031.0", "versionType": "custom"}, {"status": "affected", "version": "6.1.1x", "lessThanOrEqual": "6.1.1004.0", "versionType": "custom"}, {"status": "affected", "version": "6.1.1x", "lessThanOrEqual": "6.1.1202.0", "versionType": "custom"}, {"status": "affected", "version": "6.2.0x", "lessThanOrEqual": "6.2.0006.0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ABB", "product": "Symphony Plus SD Series", "modules": ["CI850"], "versions": [{"status": "affected", "version": "A_0", "versionType": "custom"}, {"status": "affected", "version": "A_1", "versionType": "custom"}, {"status": "affected", "version": "A_2.003", "versionType": "custom"}, {"status": "affected", "version": "A_3.005", "versionType": "custom"}, {"status": "affected", "version": "A_4.001", "versionType": "custom"}, {"status": "affected", "version": "B_0.005", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ABB", "product": "Symphony Plus MR (Melody Rack)", "modules": ["PM 877"], "versions": [{"status": "affected", "version": "3.10", "lessThanOrEqual": "3.52", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ABB", "product": "S+ Operations", "versions": [{"status": "affected", "version": "2.1", "versionType": "custom"}, {"status": "affected", "version": "2.2", "versionType": "custom"}, {"status": "affected", "version": "2.3", "versionType": "custom"}, {"status": "affected", "version": "3.3", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div>A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.&nbsp;</div><div><br></div><div>The System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.</div><div>&nbsp; &nbsp;</div></div><p>This issue affects AC800M (System 800xA):&nbsp;<span>from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.</span></p>"}]}], "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125&LanguageCode=en&DocumentPartId=&Action=Launch"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "credits": [{"lang": "en", "value": "ABB thanks Hitachi Energy for sharing the information affecting a commonly used software component.", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-13T18:02:41.810841Z", "id": "CVE-2025-3756", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T18:03:41.437Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-3756", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-13T18:02:41.810841Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T18:03:25.807Z"}}], "cna": {"title": "Denial of Service Vulnerabilities in System 800xA, Symphony\u00ae Plus IEC 61850", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "ABB thanks Hitachi Energy for sharing the information affecting a commonly used software component."}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ABB", "modules": ["CI868"], "product": "AC800M (System 800xA)", "versions": [{"status": "affected", "version": "6.0.0x", "versionType": "custom", "lessThanOrEqual": "6.0.0303.0"}, {"status": "affected", "version": "6.1.0x", "versionType": "custom", "lessThanOrEqual": "6.1.0031.0"}, {"status": "affected", "version": "6.1.1x", "versionType": "custom", "lessThanOrEqual": "6.1.1004.0"}, {"status": "affected", "version": "6.1.1x", "versionType": "custom", "lessThanOrEqual": "6.1.1202.0"}, {"status": "affected", "version": "6.2.0x", "versionType": "custom", "lessThanOrEqual": "6.2.0006.0"}], "defaultStatus": "unaffected"}, {"vendor": "ABB", "modules": ["CI850"], "product": "Symphony Plus SD Series", "versions": [{"status": "affected", "version": "A_0", "versionType": "custom"}, {"status": "affected", "version": "A_1", "versionType": "custom"}, {"status": "affected", "version": "A_2.003", "versionType": "custom"}, {"status": "affected", "version": "A_3.005", "versionType": "custom"}, {"status": "affected", "version": "A_4.001", "versionType": "custom"}, {"status": "affected", "version": "B_0.005", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ABB", "modules": ["PM 877"], "product": "Symphony Plus MR (Melody Rack)", "versions": [{"status": "affected", "version": "3.10", "versionType": "custom", "lessThanOrEqual": "3.52"}], "defaultStatus": "unaffected"}, {"vendor": "ABB", "product": "S+ Operations", "versions": [{"status": "affected", "version": "2.1", "versionType": "custom"}, {"status": "affected", "version": "2.2", "versionType": "custom"}, {"status": "affected", "version": "2.3", "versionType": "custom"}, {"status": "affected", "version": "3.3", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125&LanguageCode=en&DocumentPartId=&Action=Launch"}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.", "supportingMedia": [{"type": "text/html", "value": "<div><div>A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.&nbsp;</div><div><br></div><div>The System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.</div><div>&nbsp; &nbsp;</div></div><p>This issue affects AC800M (System 800xA):&nbsp;<span>from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.</span></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1284", "description": "CWE-1284 Improper validation of specified quantity in input"}]}], "providerMetadata": {"orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "shortName": "ABB", "dateUpdated": "2026-04-13T17:11:08.412Z"}}}, "cveMetadata": {"cveId": "CVE-2025-3756", "state": "PUBLISHED", "dateUpdated": "2026-04-13T18:03:41.437Z", "dateReserved": "2025-04-17T10:42:33.414Z", "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9", "datePublished": "2026-04-13T17:11:08.412Z", "assignerShortName": "ABB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["CI868"], "product": "AC800M (System 800xA)", "vendor": "ABB", "versions": [{"lessThanOrEqual": "6.0.0303.0", "status": "affected", "version": "6.0.0x", "versionType": "custom"}, {"lessThanOrEqual": "6.1.0031.0", "status": "affected", "version": "6.1.0x", "versionType": "custom"}, {"lessThanOrEqual": "6.1.1004.0", "status": "affected", "version": "6.1.1x", "versionType": "custom"}, {"lessThanOrEqual": "6.1.1202.0", "status": "affected", "version": "6.1.1x", "versionType": "custom"}, {"lessThanOrEqual": "6.2.0006.0", "status": "affected", "version": "6.2.0x", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "modules": ["CI850"], "product": "Symphony Plus SD Series", "vendor": "ABB", "versions": [{"status": "affected", "version": "A_0", "versionType": "custom"}, {"status": "affected", "version": "A_1", "versionType": "custom"}, {"status": "affected", "version": "A_2.003", "versionType": "custom"}, {"status": "affected", "version": "A_3.005", "versionType": "custom"}, {"status": "affected", "version": "A_4.001", "versionType": "custom"}, {"status": "affected", "version": "B_0.005", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "modules": ["PM 877"], "product": "Symphony Plus MR (Melody Rack)", "vendor": "ABB", "versions": [{"lessThanOrEqual": "3.52", "status": "affected", "version": "3.10", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "S+ Operations", "vendor": "ABB", "versions": [{"status": "affected", "version": "2.1", "versionType": "custom"}, {"status": "affected", "version": "2.2", "versionType": "custom"}, {"status": "affected", "version": "2.3", "versionType": "custom"}, {"status": "affected", "version": "3.3", "versionType": "custom"}]}], "source": "cybersecurity@ch.abb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."}, {"lang": "es", "value": "Una vulnerabilidad existe en el manejo de comandos de la pila de comunicaci\u00f3n IEC 61850 incluida en las revisiones de producto listadas como afectadas en este CVE. Un atacante con acceso a redes IEC 61850 podr\u00eda explotar la vulnerabilidad utilizando un paquete 61850 especialmente dise\u00f1ado, forzando las interfaces de comunicaci\u00f3n de los m\u00f3dulos PM 877, CI850 y CI868 a modo de fallo o causando la indisponibilidad de la conectividad 61850 de S+ Operations, lo que resultar\u00eda en una situaci\u00f3n de denegaci\u00f3n de servicio.\n\nEl System 800xA IEC61850 Connect no est\u00e1 afectado. Nota: Esta vulnerabilidad no tiene impacto en la disponibilidad y funcionalidad generales del nodo S+ Operations, solo en la funci\u00f3n de comunicaci\u00f3n 61850.\n\nEste problema afecta a AC800M (System 800xA): desde 6.0.0x hasta 6.0.0303.0, desde 6.1.0x hasta 6.1.0031.0, desde 6.1.1x hasta 6.1.1004.0, desde 6.1.1x hasta 6.1.1202.0, desde 6.2.0x hasta 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): desde 3.10 hasta 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."}], "id": "CVE-2025-3756", "lastModified": "2026-10-14T17:10:00.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "cybersecurity@ch.abb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cybersecurity@ch.abb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-3756", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-13T18:02:41.810841Z", "version": "2.0.3"}}]}, "published": "2026-04-13T18:16:27.887", "references": [{"source": "cybersecurity@ch.abb.com", "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125&LanguageCode=en&DocumentPartId=&Action=Launch"}], "sourceIdentifier": "cybersecurity@ch.abb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1284"}], "source": "cybersecurity@ch.abb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.0.0x,6.0.0303.0]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.1.0x,6.1.0031.0]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.1.1x,6.1.1004.0]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.1.1x,6.1.1202.0]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.2.0x,6.2.0006.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "AC800M (System 800xA)", "source": "cna", "vendor": "ABB"}, "product": "800xa_system", "vendor": "abb"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.3"}}], "enrichment": {"confidence": 81.0, "confidence_source": "matching", "scores": [{"score": 81.0, "source": "matching"}]}, "original": {"product": "S+ Operations", "source": "cna", "vendor": "ABB"}, "product": "symphony_+_operations", "vendor": "abb"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.10,3.52]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Symphony Plus MR (Melody Rack)", "source": "cna", "vendor": "ABB"}, "product": "symphony_plus_mr_(melody_rack)", "vendor": "abb"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "A_0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "A_1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "A_2.003"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "A_3.005"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "A_4.001"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "B_0.005"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Symphony Plus SD Series", "source": "cna", "vendor": "ABB"}, "product": "symphony_plus_sd_series", "vendor": "abb"}], "analysis": {"en": {"generated_at": "2026-04-13T18:22:14.459395+00:00", "value": {"mitigation_remediation": ["Apply the software update released by ABB for the affected AC800M, Symphony Plus SD, Symphony Plus MR, and S+ Operations revisions listed in the ABB advisory (DocumentID=7PAA020125).", "Ensure that the System\u202f800xA IEC\u202f61850 Connect variant remains up\u2011to\u2011date to avoid other vulnerabilities.", "Segment the network and restrict IEC\u202f61850 traffic to trusted devices with dedicated firewall rules.", "Monitor IEC\u202f61850 traffic for anomalous packets that could indicate attempts to trigger the vulnerability."], "summary": {"action": "Apply Patch", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "The affected products are ABB AC800M (System\u202f800xA) revisions from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, and from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series models A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack) models from 3.10 to 3.52; and S+ Operations models 2.1, 2.2, 2.3, and 3.3. The System\u202f800xA IEC\u202f61850 Connect variant is explicitly not affected.", "description_and_impact": "A vulnerability in the command handling of the IEC\u202f61850 stack allows an attacker with access to IEC\u202f61850 networks to send a specially crafted packet that can force the communication interfaces of the PM\u202f877, CI850, and CI868 modules into fault mode or render the S+ Operations 61850 connectivity unavailable, leading to a denial\u2011of\u2011service for the affected communication functions. The weakness is a misuse of resources due to improper command validation, identified as CWE\u20111284.", "risk_and_exploitability": "The CVSS score of 7.1 indicates a moderate severity while the EPSS score is unavailable and the vulnerability is not listed in CISA\u2019s KEV catalog. Exploitation requires network access to the IEC\u202f61850 domain, suggesting the attack vector is remote, within the operational network that handles IEC\u202f61850 traffic. The impact is localized to the communication interfaces, causing denial of service for 61850 connectivity but not affecting the overall system availability or core functionality of the S+ Operations node. Given the moderate severity and the need for specialized network access, the risk to an organization with strong network segmentation may be lower, but any exposed IEC\u202f61850 network could be a potential entry point."}}}}, "created": "2026-04-14T16:18:43.637695+00:00", "updated": "2026-04-14T16:33:51.666774+00:00", "vendors": ["abb", "abb$PRODUCT$800xa_system", "abb$PRODUCT$symphony_+_operations", "abb$PRODUCT$symphony_plus_mr_(melody_rack)", "abb$PRODUCT$symphony_plus_sd_series"]}