Vulnerability-Lookup

CVE-2025-3756 (GCVE-0-2025-3756)

Vulnerability from cvelistv5 – Published: 2026-04-13 17:11 – Updated: 2026-04-13 18:03

Title

Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850

Summary

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation. The System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function. This issue affects AC800M (System 800xA): from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-13 18:02 UTC

CWE

CWE-1284 - Improper validation of specified quantity in input

Assigner

ABB CNA under the icscert root

CNA scorecard C 68/100 over 17 records in the last 180 days details

References

1 reference

URL	Tags
https://search.abb.com/library/Download.aspx?Docu…

Impacted products

4 products

Vendor	Product	Version	CPE status
ABB	AC800M (System 800xA)	Affected: 6.0.0x , ≤ 6.0.0303.0 (custom) Affected: 6.1.0x , ≤ 6.1.0031.0 (custom) Affected: 6.1.1x , ≤ 6.1.1004.0 (custom) Affected: 6.1.1x , ≤ 6.1.1202.0 (custom) Affected: 6.2.0x , ≤ 6.2.0006.0 (custom)	guessed
ABB	Symphony Plus SD Series	Affected: A_0 (custom) Affected: A_1 (custom) Affected: A_2.003 (custom) Affected: A_3.005 (custom) Affected: A_4.001 (custom) Affected: B_0.005 (custom)	guessed
ABB	Symphony Plus MR (Melody Rack)	Affected: 3.10 , ≤ 3.52 (custom)	guessed
ABB	S+ Operations	Affected: 2.1 (custom) Affected: 2.2 (custom) Affected: 2.3 (custom) Affected: 3.3 (custom)	guessed

Credits

ABB thanks Hitachi Energy for sharing the information affecting a commonly used software component.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-3756",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T18:02:41.810841Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-13T18:03:41.437Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CI868"
          ],
          "product": "AC800M (System 800xA)",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "6.0.0303.0",
              "status": "affected",
              "version": "6.0.0x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.0031.0",
              "status": "affected",
              "version": "6.1.0x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1004.0",
              "status": "affected",
              "version": "6.1.1x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1202.0",
              "status": "affected",
              "version": "6.1.1x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.2.0006.0",
              "status": "affected",
              "version": "6.2.0x",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CI850"
          ],
          "product": "Symphony Plus SD Series",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "A_0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_2.003",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_3.005",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_4.001",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "B_0.005",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "PM 877"
          ],
          "product": "Symphony Plus MR (Melody Rack)",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "3.52",
              "status": "affected",
              "version": "3.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "S+ Operations",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "2.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2.2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "3.3",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "ABB thanks Hitachi Energy for sharing the information affecting a commonly used software component."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003eA vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u0026nbsp;\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\u003c/div\u003e\u003cdiv\u003e\u0026nbsp; \u0026nbsp;\u003c/div\u003e\u003c/div\u003e\u003cp\u003eThis issue affects AC800M (System 800xA):\u0026nbsp;\u003cspan\u003efrom 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1284",
              "description": "CWE-1284 Improper validation of specified quantity in input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T17:11:08.412Z",
        "orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
        "shortName": "ABB"
      },
      "references": [
        {
          "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of Service Vulnerabilities in System  800xA, Symphony\u00ae Plus IEC 61850",
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
    "assignerShortName": "ABB",
    "cveId": "CVE-2025-3756",
    "datePublished": "2026-04-13T17:11:08.412Z",
    "dateReserved": "2025-04-17T10:42:33.414Z",
    "dateUpdated": "2026-04-13T18:03:41.437Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-3756",
      "date": "2026-11-06",
      "epss": "0.00184",
      "percentile": "0.08084"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "CI868"
                ],
                "product": "AC800M (System 800xA)",
                "vendor": "ABB",
                "versions": [
                  {
                    "lessThanOrEqual": "6.0.0303.0",
                    "status": "affected",
                    "version": "6.0.0x",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "6.1.0031.0",
                    "status": "affected",
                    "version": "6.1.0x",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "6.1.1004.0",
                    "status": "affected",
                    "version": "6.1.1x",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "6.1.1202.0",
                    "status": "affected",
                    "version": "6.1.1x",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "6.2.0006.0",
                    "status": "affected",
                    "version": "6.2.0x",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "CI850"
                ],
                "product": "Symphony Plus SD Series",
                "vendor": "ABB",
                "versions": [
                  {
                    "status": "affected",
                    "version": "A_0",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "A_1",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "A_2.003",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "A_3.005",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "A_4.001",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "B_0.005",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "modules": [
                  "PM 877"
                ],
                "product": "Symphony Plus MR (Melody Rack)",
                "vendor": "ABB",
                "versions": [
                  {
                    "lessThanOrEqual": "3.52",
                    "status": "affected",
                    "version": "3.10",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "S+ Operations",
                "vendor": "ABB",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.1",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "2.2",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "2.3",
                    "versionType": "custom"
                  },
                  {
                    "status": "affected",
                    "version": "3.3",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "cybersecurity@ch.abb.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad existe en el manejo de comandos de la pila de comunicaci\u00f3n IEC 61850 incluida en las revisiones de producto listadas como afectadas en este CVE. Un atacante con acceso a redes IEC 61850 podr\u00eda explotar la vulnerabilidad utilizando un paquete 61850 especialmente dise\u00f1ado, forzando las interfaces de comunicaci\u00f3n de los m\u00f3dulos PM 877, CI850 y CI868 a modo de fallo o causando la indisponibilidad de la conectividad 61850 de S+ Operations, lo que resultar\u00eda en una situaci\u00f3n de denegaci\u00f3n de servicio.\n\nEl System 800xA IEC61850 Connect no est\u00e1 afectado. Nota: Esta vulnerabilidad no tiene impacto en la disponibilidad y funcionalidad generales del nodo S+ Operations, solo en la funci\u00f3n de comunicaci\u00f3n 61850.\n\nEste problema afecta a AC800M (System 800xA): desde 6.0.0x hasta 6.0.0303.0, desde 6.1.0x hasta 6.1.0031.0, desde 6.1.1x hasta 6.1.1004.0, desde 6.1.1x hasta 6.1.1202.0, desde 6.2.0x hasta 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): desde 3.10 hasta 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."
          }
        ],
        "id": "CVE-2025-3756",
        "lastModified": "2026-10-14T17:10:00.210",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.6,
              "source": "cybersecurity@ch.abb.com",
              "type": "Secondary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "ADJACENT",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "cybersecurity@ch.abb.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-3756",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T18:02:41.810841Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-04-13T18:16:27.887",
        "references": [
          {
            "source": "cybersecurity@ch.abb.com",
            "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
          }
        ],
        "sourceIdentifier": "cybersecurity@ch.abb.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-1284"
              }
            ],
            "source": "cybersecurity@ch.abb.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-06-05T19:41:38+00:00",
      "cve": "CVE-2025-3756",
      "id": "CVE-2025-3756",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Denial of Service Vulnerabilities in System  800xA, Symphony\u00ae Plus IEC 61850",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-3756.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-3756",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-13T18:02:41.810841Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-13T18:03:25.807Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "modules": [
                "CI868"
              ],
              "product": "AC800M (System 800xA)",
              "vendor": "ABB",
              "versions": [
                {
                  "lessThanOrEqual": "6.0.0303.0",
                  "status": "affected",
                  "version": "6.0.0x",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "6.1.0031.0",
                  "status": "affected",
                  "version": "6.1.0x",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "6.1.1004.0",
                  "status": "affected",
                  "version": "6.1.1x",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "6.1.1202.0",
                  "status": "affected",
                  "version": "6.1.1x",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "6.2.0006.0",
                  "status": "affected",
                  "version": "6.2.0x",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "CI850"
              ],
              "product": "Symphony Plus SD Series",
              "vendor": "ABB",
              "versions": [
                {
                  "status": "affected",
                  "version": "A_0",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "A_1",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "A_2.003",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "A_3.005",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "A_4.001",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "B_0.005",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "modules": [
                "PM 877"
              ],
              "product": "Symphony Plus MR (Melody Rack)",
              "vendor": "ABB",
              "versions": [
                {
                  "lessThanOrEqual": "3.52",
                  "status": "affected",
                  "version": "3.10",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "S+ Operations",
              "vendor": "ABB",
              "versions": [
                {
                  "status": "affected",
                  "version": "2.1",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "2.2",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "2.3",
                  "versionType": "custom"
                },
                {
                  "status": "affected",
                  "version": "3.3",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "ABB thanks Hitachi Energy for sharing the information affecting a commonly used software component."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cdiv\u003e\u003cdiv\u003eA vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u0026nbsp;\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\u003c/div\u003e\u003cdiv\u003e\u0026nbsp; \u0026nbsp;\u003c/div\u003e\u003c/div\u003e\u003cp\u003eThis issue affects AC800M (System 800xA):\u0026nbsp;\u003cspan\u003efrom 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.\u003c/span\u003e\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "ADJACENT",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "NONE",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1284",
                  "description": "CWE-1284 Improper validation of specified quantity in input",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-13T17:11:08.412Z",
            "orgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
            "shortName": "ABB"
          },
          "references": [
            {
              "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Denial of Service Vulnerabilities in System  800xA, Symphony\u00ae Plus IEC 61850",
          "x_generator": {
            "engine": "Vulnogram 1.0.1"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2b718523-d88f-4f37-9bbd-300c20644bf9",
        "assignerShortName": "ABB",
        "cveId": "CVE-2025-3756",
        "datePublished": "2026-04-13T17:11:08.412Z",
        "dateReserved": "2025-04-17T10:42:33.414Z",
        "dateUpdated": "2026-04-13T18:03:41.437Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

7PAA020125

Vulnerability from csaf_abb - Published: 2026-04-13 00:30 - Updated: 2026-04-13 00:30

Summary

Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850 communication stack

Scope

1 vulnerability in this advisory, including CVE-2025-3756.

CVE-2025-3756

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed above. An attacker with access to IEC 61850 networks could exploit the vulnerability by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation. The System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 5 products Known affected: 16 products

Open the full advisory

FKIE_CVE-2025-3756

Vulnerability from fkie_nvd - Published: 2026-04-13 18:16 - Updated: 2026-10-14 17:10

Severity

6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

	URL	Tags
	cybersecurity@ch.abb.com	https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125&LanguageCode=en&DocumentPartId=&Action=Launch

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CI868"
          ],
          "product": "AC800M (System 800xA)",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "6.0.0303.0",
              "status": "affected",
              "version": "6.0.0x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.0031.0",
              "status": "affected",
              "version": "6.1.0x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1004.0",
              "status": "affected",
              "version": "6.1.1x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.1202.0",
              "status": "affected",
              "version": "6.1.1x",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.2.0006.0",
              "status": "affected",
              "version": "6.2.0x",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CI850"
          ],
          "product": "Symphony Plus SD Series",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "A_0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_2.003",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_3.005",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "A_4.001",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "B_0.005",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "PM 877"
          ],
          "product": "Symphony Plus MR (Melody Rack)",
          "vendor": "ABB",
          "versions": [
            {
              "lessThanOrEqual": "3.52",
              "status": "affected",
              "version": "3.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "S+ Operations",
          "vendor": "ABB",
          "versions": [
            {
              "status": "affected",
              "version": "2.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2.2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "2.3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "3.3",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "cybersecurity@ch.abb.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad existe en el manejo de comandos de la pila de comunicaci\u00f3n IEC 61850 incluida en las revisiones de producto listadas como afectadas en este CVE. Un atacante con acceso a redes IEC 61850 podr\u00eda explotar la vulnerabilidad utilizando un paquete 61850 especialmente dise\u00f1ado, forzando las interfaces de comunicaci\u00f3n de los m\u00f3dulos PM 877, CI850 y CI868 a modo de fallo o causando la indisponibilidad de la conectividad 61850 de S+ Operations, lo que resultar\u00eda en una situaci\u00f3n de denegaci\u00f3n de servicio.\n\nEl System 800xA IEC61850 Connect no est\u00e1 afectado. Nota: Esta vulnerabilidad no tiene impacto en la disponibilidad y funcionalidad generales del nodo S+ Operations, solo en la funci\u00f3n de comunicaci\u00f3n 61850.\n\nEste problema afecta a AC800M (System 800xA): desde 6.0.0x hasta 6.0.0303.0, desde 6.1.0x hasta 6.1.0031.0, desde 6.1.1x hasta 6.1.1004.0, desde 6.1.1x hasta 6.1.1202.0, desde 6.2.0x hasta 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): desde 3.10 hasta 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3."
    }
  ],
  "id": "CVE-2025-3756",
  "lastModified": "2026-10-14T17:10:00.210",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "cybersecurity@ch.abb.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "ADJACENT",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "cybersecurity@ch.abb.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-3756",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-13T18:02:41.810841Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-13T18:16:27.887",
  "references": [
    {
      "source": "cybersecurity@ch.abb.com",
      "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
    }
  ],
  "sourceIdentifier": "cybersecurity@ch.abb.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1284"
        }
      ],
      "source": "cybersecurity@ch.abb.com",
      "type": "Secondary"
    }
  ]
}

GHSA-H84P-PW6F-C6P6

Vulnerability from github – Published: 2026-04-13 18:30 – Updated: 2026-04-13 18:30

Details

The System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.

This issue affects AC800M (System 800xA): from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.

Severity

6.5 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 (High)


                  
                    CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-3756"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-1284"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-13T18:16:27Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation.\u00a0\n\n\n\n\nThe System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function.\n\n\u00a0 \u00a0\n\n\n\nThis issue affects AC800M (System 800xA):\u00a0from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.",
  "id": "GHSA-h84p-pw6f-c6p6",
  "modified": "2026-04-13T18:30:42Z",
  "published": "2026-04-13T18:30:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3756"
    },
    {
      "type": "WEB",
      "url": "https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

ICSA-26-120-01

Vulnerability from csaf_cisa - Published: 2026-04-13 00:30 - Updated: 2026-04-30 06:00

Summary

ABB System 800xA, Symphony Plus IEC 61850

Scope

1 vulnerability in this advisory, including CVE-2025-3756.

CVE-2025-3756

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 5 products Known affected: 16 products

Open the full advisory

WID-SEC-W-2026-1086

Vulnerability from csaf_certbund - Published: 2026-04-13 22:00 - Updated: 2026-04-13 22:00

Summary

ABB 800xA CI868 (für AC 800M) und PM877 (Symphony Plus MR): Schwachstelle ermöglicht Denial of Service

Severity

Mittel

Scope

1 vulnerability in this advisory, including CVE-2025-3756.

CVE-2025-3756

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-3756 (GCVE-0-2025-3756)

7PAA020125

FKIE_CVE-2025-3756

GHSA-H84P-PW6F-C6P6

ICSA-26-120-01

WID-SEC-W-2026-1086

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour