Our takeCISA reports that ABB PCM600 <=2.14 has two actively exploited vulnerabilities that let attackers escalate privileges or overwrite files. Patch per the advisory if you run it.Cyber Resilience desk
Sources (1)
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA advisory ICSA-26-274-03: ABB PCM600 <=2.14 has two vulnerabilities (CVSS 6.4) that let authenticated attackers escalate privileges or overwrite files. Update to a fixed version immediately if you operate this in your OT environment.
What this means for you — Lean IT orgs:If you run ABB PCM600 for protection and control devices, check your version. Update to a fixed release now or ask your equipment vendor how they protect against these privilege-escalation and file-overwrite flaws.
What this means for you — MSP:Review client OT/ICS estates for ABB PCM600 <=2.14. These two vulnerabilities allow authenticated privilege escalation or file overwrite; push the vendor update and verify it is applied across affected systems.
What this means for you — Researcher:CISA ICSA-26-274-03 details two CVSS 6.4 flaws in ABB PCM600 <=2.14 that permit authenticated privilege escalation or arbitrary file overwrite. Patch per the advisory.