abb ac500 v3

The abb ac500 v3 tag covers security vulnerabilities and firmware updates for ABB's AC500 V3 programmable logic controller (PLC) line. Discussions focus on remotely exploitable flaws, including a critical stack buffer overflow (CVE-2025-15467) in the Cryptographic Message Syntax parsing path, and other authentication, certificate, and runtime stability issues. Patches are delivered via firmware 3.9.0 and hotfix HF1 through Automation Builder 2.9.0. Content emphasizes the importance of verifying exact firmware builds and treating exposed AC500 V3 nodes as high-priority industrial assets in chemical, manufacturing, energy, and water environments.