CVE-2026-15953

MediumCVSS 5.0

Published: 28/09/2026(UTC)Updated: 28/09/2026(UTC)Translated: 28/09/2026(UTC)NVD NIST

Summary

Path Traversal vulnerability in ABB Protection and control IED manager (PCM600) through version 2.14. Allows an attacker to access files outside the intended directory.

Risk Assessment

Risk of unauthorized access to system or configuration files, potentially leading to system integrity compromise.

Recommendation

Update PCM600 to the latest available version and restrict access to the system.

Other vulnerabilities in ABB PCM600

CVE-2026-15952Medium
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600) through version 2.14. May allow an attacker to gain unauthorized access to resources.

Original NVD description (English source)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection and control IED manager (PCM600): through 2.14.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS