CVE-2026-15952

MediumCVSS 6.4

Published: 28/09/2026(UTC)Updated: 28/09/2026(UTC)Translated: 28/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600) through version 2.14. May allow an attacker to gain unauthorized access to resources.

Risk Assessment

Risk of unauthorized access to critical system resources, potentially leading to security compromise.

Recommendation

Update PCM600 to the latest available version and review permission configurations.

Other vulnerabilities in ABB PCM600

CVE-2026-15953Medium
Path Traversal vulnerability in ABB Protection and control IED manager (PCM600) through version 2.14. Allows an attacker to access files outside the intended directory.

Original NVD description (English source)

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS