Our takeCISA reports that ABB PCM600 <=2.14 has two vulnerabilities that let an attacker escalate privileges or overwrite files. Patch now if you run it.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Update ABB PCM600 to a version newer than 2.14 if you run it in your OT environment. Successful exploitation allows privilege escalation or arbitrary file overwrite.
What this means for you — Lean IT orgs:If you use ABB Protection and Control IED Manager PCM600, update it to a newer version right away. The current version lets attackers escalate privileges or overwrite files.
What this means for you — MSP:Check client environments for ABB PCM600 <=2.14 and update it. Exploitation can lead to privilege escalation or file overwrites on affected protection and control systems.
What this means for you — Researcher:Review the CSAF and full ICSA-26-274-03 details for impact on downstream OT integrations or custom tooling.