ABB Ability Zenon

ABB Ability Zenon bundled an outdated and unsupported version of MongoDB (4.2) within its IIoT services, exposing industrial control environments to a range of serious vulnerabilities including system crashes, unauthorized code execution, and data compromise. The root cause is a failure to maintain and update third-party software components embedded within a vendor product — a common but dangerous oversight in OT/ICS environments. This matters significantly because industrial systems often run for extended periods without updates, creating long windows of exposure. When vulnerable components are bundled by vendors, end users may not even be aware of their presence, making proactive vendor communication and inventory management essential.