ICS-Advisories

Risk Evaluation

An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the product to stop, disclose process memory or insert and run arbitrary code.

Zusammenfassung der Gegenmaßnahmen

The problem is corrected by updating the Node.js runtime used by the product versions listed as affected. A new ABM release containing the patched runtime is not yet available; until then, the runtime must be updated manually: - Node.js 24.x (ABM 1.2, 1.2.1): Update to Node.js 24.22.1 or later within the 24.x line. This version has been successfully tested with the ABM standard. ABB recommends that customers apply the update at earliest convenience. Major-version changes require compatibility testing before a production restart. Where ASP.NET Core / .NET components are deployed together with ABM, ABB additionally recommends installing the vendor-patched .NET releases.