ABB Protection and Control IED Manager PCM600
CISA discloses local privilege-escalation and path-traversal flaws in ABB PCM600 2.14 and earlier.
CISA advisory ICSA-26-274-03 describes two local vulnerabilities in ABB Protection and Control IED Manager PCM600 version 2.14 and earlier. CVE-2026-15952 (CVSS 3.1 6.4) lets a local authenticated user abuse Scheduler Service permissions to escalate privileges toward LocalSystem. CVE-2026-15953 (CVSS 3.1 5.0) is a path traversal in project-archive extraction that can overwrite files outside the intended directory. CISA says no known public exploitation has been reported.
- The Scheduler Service runs as LocalSystem with overly broad user permissions.
- Project-archive extraction can write files outside the intended directory.
- PCM600 2.14 and earlier are affected; both flaws need local access.
- CISA reports no known public exploitation of either issue.
- Vendors
- ABB
- Products
- PCM600
- Organizations
- CISA
- Countries
- Switzerland
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-15952 | Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600) | 7.1 | — | ||
| CVE-2026-15953 | Path Traversal in ABB PCM600 through 2.14 | 5.6 | — |
From the original article
3 min read at cisa.govView CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or overwrite files. The following versions of ABB Protection and Control IED Manager PCM600 are affected: Protection and Control IED Manager PCM600 <=2. 14 (CVE-2026-15952, CVE-2026-15953) CVSS Vendor Equipment Vulnerabilities v3 6.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.