ABB Ability Edgenius | Missing Authentication in Edgenius AuthDB

Plan PatchCVSS 7.87paa026271Oct 22, 2026

ABB

Attack path

Attack VectorLocal

Auth RequiredLow

ComplexityHigh

User InteractionNone needed

Summary

ABB Ability Edgenius versions 3.2.3.0 and below contain a missing authentication vulnerability in the Edge Authentication Database (AuthDB). An attacker with local access to an edge node could send unauthenticated requests to the AuthDB service and manipulate the authentication database, potentially modifying system configuration and credentials. This could allow unauthorized changes to edge node behavior or compromise of system credentials. ABB has released version 3.2.4.1 with a fix and provides a Kubernetes network policy as a temporary mitigation to restrict AuthDB access to authorized services only.

What this means

What could happen

An attacker with local access to an Edgenius edge node could bypass authentication on the AuthDB database and modify edge system configuration or credentials, potentially disrupting or redirecting industrial data collection and control operations.

Who's at risk

Organizations running ABB Ability Edgenius for edge computing and data collection in industrial environments, including water utilities, power distribution operators, and manufacturing facilities that rely on edge nodes for remote monitoring and control.

How it could be exploited

An attacker with local access to the Edgenius edge node could send unauthenticated requests directly to the Edge Authentication Database (AuthDB). By exploiting the missing authentication check, they could modify database entries, alter system credentials, or manipulate configuration without valid credentials.

Prerequisites

Local access to the Edgenius edge node
Ability to reach the AuthDB service on the edge node's network interface
Knowledge of the AuthDB service port and API endpoints

Missing authentication mechanismLocal access required but can be combined with other vulnerabilities for remote impactAffects edge authentication and credential managementLow exploitation complexity once local access is gained

Affected products (1)

ProductAffected VersionsFix Status

Ability Edgenius <=3.2.3.0≤ 3.2.3.03.2.4.1

Remediation & Mitigation

0/4

Do now

0/2

WORKAROUNDApply the Kubernetes network policy provided by ABB to restrict AuthDB access to authorized services only

HARDENINGRestrict network access to edge nodes using firewall rules to allow only trusted administrative networks and required operational networks

Schedule — requires maintenance window

0/1

Patching may require device reboot — plan for process interruption

HOTFIXUpgrade Ability Edgenius to version 3.2.4.1 or later

Long-term hardening

0/1

HARDENINGImplement network segmentation to isolate Edgenius edge nodes from untrusted networks and limit lateral movement

CVEs (1)

CVE-2026-13599

View full ABB PSIRT advisory

↑↓ Navigate · Esc Close

API: /api/v1/advisories/343eb796-77c6-40a4-91a8-4c7519ddd483

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.