File and Path Handling

Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.

1. unauthorized file accessCVE-2024-6209ABB · CVSS 10 · 17% likely

   CWE-552

2. ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root accessCVE-2022-0902ABB · CVSS 8.1 · 17% likely

   CWE-22

3. In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download a…CVE-2019-7227Abb · 8.4% likely

   CWE-22

4. Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIE…CVE-2013-5021Abb · 2.1% likely

   CWE-22

5. UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that refer…CVE-2020-11420Abb · 1.6% likely

   CWE-22

6. Binary Planting / LoadLibrary DLL's not SignedCVE-2024-13946ABB · CVSS 6.8 · 1.1% likely

   CWE-427

7. ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlCVE-2022-34836ABB · CVSS 5.9 · 0.7% likely

   CWE-23

8. Malformed Packet HandlingCVE-2024-0335ABB · CVSS 7.5 · 0.6% likely

   CWE-23

9. Dangerous File UploadCVE-2024-51548ABB · CVSS 9.9 · 0.6% likely

   CWE-434

10. Absolute Path TraversalCVE-2024-51549ABB · CVSS 10 · 0.5% likely

    CWE-36

11. Authenticated Absolute Path TraversalCVE-2024-48850ABB · CVSS 7.2 · 0.5% likely

    CWE-36

12. Admin Authorized System File corruptionCVE-2025-2409ABB · CVSS 9.1 · 0.5% likely

    CWE-73

13. Stored Absolute Path TraversalCVE-2024-13945ABB · CVSS 6 · 0.4% likely

    CWE-36

14. Mint Workbench I Path traversal VulnerabilityCVE-2026-19438ABB · CVSS 7.5 · 0.4% likely

    CWE-22

15. Admin Authorized File UploadCVE-2025-30173ABB · CVSS 6.7 · 0.4% likely

    CWE-434

16. Admin Authorized File Upload and Execute PHPCVE-2025-30169ABB · CVSS 6.7 · 0.4% likely

    CWE-434

17. Predictable FilenameCVE-2024-51553ABB · CVSS 6.5 · 0.4% likely

    CWE-73

18. File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web SiteCVE-2025-14771ABB · CVSS 9.9 · 0.3% likelycovered by CyberSIXT

    CWE-552

19. An attacker who successfully exploited these vulnerabilities could grant read access to files. A vulnerability exists in the AC500 V3 version mentioned. A successfully authenticat…CVE-2024-12429ABB · CVSS 4.3 · 0.3% likely

    CWE-22

20. Configuration DownloadCVE-2024-51542ABB · CVSS 8.2 · 0.3% likely

    CWE-552

21. Drive Composer Link Following Local Privilege Escalation VulnerabilityCVE-2022-31218ABB · CVSS 7.8 · 0.3% likely

    CWE-59

22. Drive Composer Link Following Local Privilege Escalation VulnerabilityCVE-2022-31217ABB · CVSS 7.8 · 0.3% likely

    CWE-59

23. Drive Composer Link Following Local Privilege Escalation VulnerabilityCVE-2022-31216ABB · CVSS 7.8 · 0.3% likely

    CWE-59

24. Local File InclusionCVE-2024-51541ABB · CVSS 8.2 · 0.3% likely

    CWE-98

25. Drive Composer Link Following Local Privilege Escalation VulnerabilityCVE-2022-31219ABB · CVSS 7.3 · 0.3% likely

    CWE-59

26. Path Traversal VulnerabilityCVE-2025-3465ABB · CVSS 7.1 · 0.2% likelycovered by CyberSIXT

    CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.