Lucene search

[email protected]NVD:CVE-2023-3321

HistoryJul 24, 2023 - 6:15 p.m.

CVE-2023-3321

2023-07-2418:15:23

CWE-15

[email protected]

web.nvd.nist.gov

cve-2023-3321

low-privileged users

data directories

zenon system

specially crafted programs

attacker exploit

vulnerability

abb ability zenon

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted
programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.
This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

Affected configurations

Nvd

Node

abbzenonRange≤11.0.0

VendorProductVersionCPE
abbzenon*cpe:2.3:a:abb:zenon:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
abb	zenon	*	cpe:2.3:a:abb:zenon::::::::

References

search.abb.com/library/Download.aspx?DocumentID=2NGA001801&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.194142766.2067879716.1690216773-1911411808.1686627590

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

Related for NVD:CVE-2023-3321

prion1 cve1 cvelist1