Multiple Vulnerabilities in ABB Products

Affected Environment

ABB WebPro SNMP Card PowerValue, AC500 V3 PLCs (PM5xxx), Automation Builder Gateway for Windows, and AC500 V3 OpenSSL firmware.

Threat Overview

Eight CVEs enabling DoS, auth bypass, session hijacking, PKI exposure, PLC scanning, and stack buffer overflow RCE.

Exposure Timeline

Disclosed 12–13 May 2026; no active exploitation reported at time of publication across all four advisories.

Attack Surface

ICS network interfaces, CODESYS gateway port 1217, WebPro firmware, and OpenSSL CMS parsing in PLC firmware.

Technical Root Cause

Improper input validation, auth algorithm bypass, session expiration failure, insecure defaults, and stack buffer overflow in OpenSSL.

Exploitation Pathway

Adjacent or remote network attackers send crafted messages or HTTP requests; no authentication required for several flaws.