Lucene search

K
nvd[email protected]NVD:CVE-2023-3324
HistoryJul 24, 2023 - 6:15 p.m.

CVE-2023-3324

2023-07-2418:15:23
CWE-502
web.nvd.nist.gov
vulnerability
abb ability zenon
low-privileged users
data manipulation
exploit
host security
cve-2023-3324

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted
programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.
This issue affects ABB Abilityβ„’ zenon: from 11 build through 11 build 106404.

Affected configurations

NVD
Node
abbzenonRange≀11.0.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

Related for NVD:CVE-2023-3324