Vendor profile
ABB
800xA or Symphony Plus at Levels 2–3 in process and generation plants with AC 800M controllers on redundant control networks; in substations, Relion IEDs on an IEC 61850 station bus with MicroSCADA X SYS600 or COM600 as the gateway and RTU500 units for telecontrol back to the control centre.
DCSSubstation automationDrivesRoboticsPLCElectrification
DCS
System 800xAFreelanceSymphony Plus (power generation)Advant / MOD 300 (legacy)
Substation
Relion 615 / 620 / 630 / 650 / 670 protection relaysMicroSCADA X SYS600RTU500 seriesCOM600 station computer
PLC / Automation
AC 500 and AC 500-S (safety) PLCsAC 800M controllersAutomation Builder engineering suite
Drives / Robotics
ACS580 / ACS880 drivesNETA-21 remote monitoringIRC5 and OmniCore robot controllersRobotStudio
Energy / edge
Ability EdgeniusGenixTerra EV charging controllers
Defensive considerations
- Baseline Relion relay setting groups and export CID/SCD files to version control — an unrecorded setting-group change is a protection-scheme change
- Inventory GOOSE publishers and subscribers, then alarm on new GoID, appID or a stVal/stNum sequence that breaks the expected pattern
- Keep the IEC 61850 station bus in its own VLAN with no routed path to plant IT; GOOSE is layer 2 and unauthenticated by default
- Apply ABB's 800xA node hardening and System Verification guidance rather than generic Windows baselines — antivirus and patching are vendor-qualified per release
- Restrict MicroSCADA X SYS600 and COM600 web interfaces to the substation engineering VLAN and remove default accounts
- Treat RTU500 firmware advisories as high priority: these units frequently terminate the WAN link from a control centre
- Isolate NETA-21 drive monitoring and Ability Edge gateways so a cloud-facing component cannot reach the control network directly
- Alarm on RobotStudio connections and IRC5/OmniCore controller mode changes in robotic cells
- Subscribe to ABB cybersecurity alerts by product family — advisories are issued per family, not site-wide
At a glance
HeadquartersSwitzerland / Sweden (Zurich)
Protocolsiec-61850, goose, mms, iec-60870-5-104, dnp3, profibus, profinet, modbus-tcp, opc-ua
IndustriesElectric Power, Oil & Gas, Mining, Manufacturing, Marine, Water / Wastewater
Sources & further reading
This website is an independent educational and defensive cybersecurity resource and is not affiliated with the vendors referenced within it.