ABB Ability Edgenius: 1 CVE, High 7.8
Summary
CISA reports 1 vulnerability in ABB Gateway - bE100, Gateway - E3100C, Server - vE1000. Weakness type: Incorrect Resource Transfer Between Spheres. ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. Highest CVSS v3 score: 7.8 (High), not remotely exploitable per its CVSS vector. At least one CVE is on CISA's Known Exploited Vulnerabilities list.
At a glance
- Vendor
- ABB
- Products
- Gateway - bE100, Gateway - E3100C, Server - vE1000
- CVEs
- CVE-2026-31431
- Highest CVSS v3
- 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- Yes
- Sectors (per CISA)
- Critical Manufacturing, Energy, Water and Wastewater Systems, Chemical
- Deployed
- Worldwide
- Vendor HQ
- Switzerland
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-31431 | Incorrect Resource Transfer Between Spheres | 7.8 | – | Yes (added 2026-05-01) | CVE-2026-31431 |
Affected products (5)
- ABB Ability Edgenius Gateway - bE100
- ABB Ability Edgenius Gateway - E3100C
- ABB Ability Edgenius Server - vE1000
- ABB Ability Edgenius >=3.2.0.0|<3.2.4.1
- ABB Ability Edgenius 3.2.4.1
Vendor fixes and mitigations (from advisory)
- Vendor Fix: The problem is corrected in the following product versions: - Edgenius 3.2.4.1 ABB recommends that customers apply the update at earliest convenience.
- Mitigation: Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. Refer to section General security recommendations for further advise on how to keep your system secure. Recommended mitigation factors - Limit access to ssh or cockpit - By default, no additional lower privilege users are present on Edgenius installations
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
- CISA advisory ICSA-26-260-06
- Machine-readable CSAF record
- https://psirt.abb.com/csaf/2026/7paa024620.json
- https://search.abb.com/library/Download.aspx?DocumentID=7PAA024620&LanguageCode=en&Documen
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.