Abb Flxeon vulnerabilities

7 CVEs affecting Abb Flxeon, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10207, published 2025-09-18.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-48841, published 2025-01-27. Critical severity, CVSS 10.0. EPSS: 4.4% chance of exploitation in the next 30 days. Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older.
• CVE-2024-48852, published 2025-01-29. Critical severity, CVSS 9.4. EPSS: 2.5% chance of exploitation in the next 30 days. Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access. This issue affects FLXEON through <= 9.3.4.
• CVE-2024-48849, published 2025-01-29. Critical severity, CVSS 9.4. EPSS: 0.9% chance of exploitation in the next 30 days. Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.
• CVE-2024-48851, published 2025-09-18. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation. This issue affects FLXEON: through 9.3.5.
• CVE-2025-10207, published 2025-09-18. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5.
• CVE-2025-10205, published 2025-09-17. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Use of a One-Way Hash with a Predictable Salt vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5. and newer versions
• CVE-2024-48842, published 2025-09-17. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions