2
CVEs
0
Critical
0
High
0
KEV
0
PoC
0
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
2
LOW
0
Monthly CVE Trend
Affected Products (30)
Aspect Ent 96 Firmware
29
Aspect Ent 2 Firmware
29
Matrix 216 Firmware
29
Matrix 232 Firmware
29
Matrix 296 Firmware
29
Aspect Ent 256 Firmware
29
Aspect Ent 12 Firmware
29
Nexus 264 Firmware
29
Matrix 11 Firmware
29
Nexus 3 264 Firmware
29
Matrix 264 Firmware
29
Nexus 2128 Firmware
29
Nexus 3 2128 Firmware
29
Nexus 264 F Firmware
28
Nexus 264 A Firmware
28
Nexus 264 G Firmware
28
Nexus 2128 A Firmware
28
Nexus 2128 G Firmware
28
Nexus 2128 F Firmware
28
Symphony Historian
9
Symphony Operations
9
Zenon
7
Automation Builder
6
Pb610 Panel Builder 600 Firmware
6
Mint Workbench
6
800Xa System
5
Control Builder Safe
4
Compact Hmi
4
T Mac Plus
4
Pb610 Panel Builder 600
4
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-12705 | Missing firmware integrity verification in ABB KNX Update Tool versions through 2.0.175 allows an adjacent network attacker with low-privilege access to inject tampered updates onto KNX building automation devices, leading to high integrity and availability impact. The vulnerability (CWE-353) means the tool accepts update packages without cryptographic validation, enabling a man-in-the-middle or rogue-update attack on the KNX bus segment. No public exploit code or CISA KEV listing has been identified at time of analysis, and active exploitation has not been confirmed. | MEDIUM | 5.9 | 0.1% | 30 |
No patch
|
| CVE-2025-13162 | Uncontrolled Search Path Element (DLL hijacking) in ABB Control Builder A and 800xA for Advant Master enables a local low-privileged attacker to achieve high-integrity code execution on industrial engineering workstations. Affected versions span Control Builder A through 1.4/4 and 800xA for Advant Master through 6.2.0-1, covering multiple release branches of ABB's flagship OT automation suite. No public exploit or CISA KEV listing is identified at time of analysis, limiting immediate mass-exploitation risk, though OT environments running these ICS platforms warrant targeted patching prioritization given integrity-impact severity. | MEDIUM | 4.1 | 0.1% | 21 |
No patch
|