We explore two key vulnerabilities in ABB's building automation and energy management software, ABB Cylon Aspect.