ICS Advisories

Risk evaluation

- General statement ABB became aware of vulnerabilities in ASPECT versions listed as affected in the advisory. The earliest report dates to Oct 2026. An attacker who successfully exploits these vulnerabilities may insert and run arbitrary code on affected products. ABB is currently investigating this vulnerability to provide adequate protection to customers. ASPECT is an on-premises Building Management System (BMS) that provides an additional option to be remotely accessible. - Statement on newly reported vulnerabilities ASPECT devices are not intended to be internet-facing. A product advisory issued in June 2023 informed customers regarding this fact. An attacker who successfully exploits these vulnerabilities could potentially gain unauthorized access and potentially compromise the system's - and log-file-confidentiality, integrity and availability. ABB requires, as noted in previous security advisories and user documentation, that ASPECT should not be exposed to the Internet or any other unsecured network. Note: To exploit ASPECT, an attacker would need a misconfigured system. ABB strongly advises customers and system integrators to follow the instructions documented in: FBXi, CBXi and ASPECT® SOLUTIONS, which can be downloaded from the ABB library.

Mitigation summary

Please immediately do the following actions on any released SW version of ASPECT: - Stop and disconnect any ASPECT products that are exposed directly to the Internet, either via a direct ISP connection or via NAT port forwarding - Ensure that physical controls are in place, so no unauthorized personnel can access your devices, components, peripheral equipment, and networks - Ensure log-files, downloaded from the equipment is protected against unauthorized access - Ensure that all ASPECT products are upgraded to the latest firmware version. Please find the latest version of ASPECT firmware on the respective product homepage - When remote access is required, only use secure methods. If a Virtual Private Network (VPN) is used, ensure that the chosen VPN is secure i.e. updated to the most current version available and configured for secure access