ABB Ability Symphony Plus Engineering

ABB S+ Engineering PostgreSQL Vulnerabilities

Overview

ABB has released a security advisory (PSIRT 7PAA017341) detailing several vulnerabilities in the PostgreSQL component used by their S+ Engineering product. These vulnerabilities could allow an attacker to insert and run arbitrary code within the system, potentially leading to denial-of-service situations or unauthorized disclosure of information.

Affected Products

• ABB Ability System 800xA
• ABB Ability System 800xA with S+ Engineering

Specific versions affected include:

• ABB Ability System 800xA S+ Engineering 2.2, 2.3, and all subsequent releases up to 2.4 SP2.

Vulnerability Details

The vulnerabilities are present in PostgreSQL version 13.11 and earlier versions used by the S+ Engineering product. The specific issues include:

• CVE-2026-XXXX: An arbitrary code execution vulnerability.
• CVE-2026-YYYY: A privilege dropping error that could allow unauthorized access to sensitive data.

Impact

An attacker who successfully exploits these vulnerabilities could:

• Insert and run arbitrary code in the S+ system.
• Cause

Read the full article at CISA Advisories

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.