The vulnerability identified as CVE-2026-15952 affects ABB Protection and control IED manager (PCM600) through version 2.14. It is classified under CWE-732, which involves incorrect permission assignment for a critical resource. The CVSS 3.1 base score is 6.4 with vector AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires local access with high privileges and high attack complexity, but results in high impact on confidentiality, integrity, and availability.

If exploited, this vulnerability could allow an attacker with high privileges and local access to gain unauthorized access or control over critical resources within PCM600, potentially leading to significant compromise of system confidentiality, integrity, and availability. However, exploitation requires high privileges and local access, limiting the attack surface.

No specific patch or remediation information is provided in the vendor advisory or CVE data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users with high privileges and monitor for unauthorized permission changes.