vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-3756

Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850

MEDIUM
6.5
CVSS Score
Published: April 13, 2026 at 05:11 PM UTC
Updated: October 14, 2026 at 05:10 PM UTC
4 products affected across 1 vendorSymphony + OperationsSymphony Sd SeriesSymphony Mr

Using AC800M (System 800xA) by ABB?

Get instant alerts when new vulnerabilities affect AC800M (System 800xA) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks could exploit the vulnera bility by using a specially crafted 61850 packet, forcing the communication interfaces of the PM 877, CI850 and CI868 modules into fault mode or causing unavailability of the S+ Operations 61850 connectivity, resulting in a denial-of-service situation. The System 800xA IEC61850 Connect is not affected. Note: This vulnerability does not impact on the overall availability and functionality of the S+ Operations node, only the 61850 communication function. This issue affects AC800M (System 800xA): from 6.0.0x through 6.0.0303.0, from 6.1.0x through 6.1.0031.0, from 6.1.1x through 6.1.1004.0, from 6.1.1x through 6.1.1202.0, from 6.2.0x through 6.2.0006.0; Symphony Plus SD Series: A_0, A_1, A_2.003, A_3.005, A_4.001, B_0.005; Symphony Plus MR (Melody Rack): from 3.10 through 3.52; S+ Operations: 2.1, 2.2, 2.3, 3.3.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ac 800M· ABB
90%
6.0.0x ≤ v ≤ 6.0.0303.06.1.0x ≤ v ≤ 6.1.0031.06.1.1x ≤ v ≤ 6.1.1004.06.1.1x ≤ v ≤ 6.1.1202.06.2.0x ≤ v ≤ 6.2.0006.06.0.0x6.1.0x6.1.1x6.2.0x
Symphony Mr· ABB
90%
3.10 ≤ v ≤ 3.523.10
Symphony + Operations· ABB
90%
2.12.22.33.3
Symphony Sd Series· ABB
90%
A_0A_1A_2.003A_3.005A_4.001B_0.005

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

Source: cverecord
https://search.abb.com/library/Download.aspx?DocumentID=7PAA020125&LanguageCode=en&DocumentPartId=&Action=Launch

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.5MEDIUMABB
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-1284

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card