ABB Ability Zenon

ABB has issued a security advisory regarding multiple vulnerabilities in its Ability Zenon industrial automation platform. These vulnerabilities, primarily related to MongoDB, could allow attackers to bypass security, crash systems, execute unauthorized actions, or compromise data. The advisory highlights several MongoDB versions affected, and recommends replacing the bundled MongoDB instance with a supported version or uninstalling IIoT services if they are not needed. The vulnerabilities include issues related to improper length handling, regular expression injection, and denial of service through crafted queries. ABB recommends reviewing the associated PSIRT security advisories for detailed information and mitigation steps.