ABB PSIRT vulnerabilities and threats

A vulnerability in B&R Industrial Automation GmbH products related to OpenSSL could allow an attacker to cause the product to stop functioning or to execute arbitrary code. The issue affects product versions prior to and including 6.6.0. A fix is available in version 6.6.0.

Multiple critical PHP vulnerabilities have been publicly disclosed affecting ABB products including Netcontrol 100, 200, 500, GW502-iM, and NAM PHP2Shell. Successful exploitation could allow an attacker to insert and execute arbitrary code on these affected products.