Improper Permissions in ABB Protection and Control IED Manager
CVE-2026-15952

7.1HIGH

Key Information:

Vendor

Abb

Vendor
CVE Published:
28 September 2026

What is CVE-2026-15952?

An incorrect permission assignment vulnerability has been identified in ABB's Protection and Control IED Manager (PCM600). This flaw may allow unauthorized access to critical resources, potentially leading to unprivileged users executing actions or accessing sensitive data. It is essential to assess the impact of this vulnerability on operational stability and security, particularly in settings where robust access controls are required.

Affected Version(s)

Protection and control IED manager (PCM600) 0 <= 2.14

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.