Lucene search

K
nvd[email protected]NVD:CVE-2023-3322
HistoryJul 24, 2023 - 6:15 p.m.

CVE-2023-3322

2023-07-2418:15:23
CWE-732
web.nvd.nist.gov
cve-2023-3322
low-privileged users
data update
zenon system
directory access
specially crafted programs
vulnerability exploit
installed hosts
abb ability zenon

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.9%

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted
programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.
This issue affects ABB Abilityβ„’ zenon: from 11 build through 11 build 106404.

Affected configurations

NVD
Node
abbzenonRange≀11.0.0

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.9%

Related for NVD:CVE-2023-3322