RCE in Abb Txpert Hub Coretec 4
CVE-2023-2625
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.005 (38.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 39th percentile — 38.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Abb Txpert Hub Coretec 4
- Abb Txpert Hub Coretec 4 Firmware
- Hitachi Energy Txpert Hub Coretec 4 — versions TXpert Hub CoreTec 4 version 2.0.*, TXpert Hub CoreTec 4 version 2.1.*, TXpert Hub CoreTec 4 version 2.2.*
Weakness classification (CWE)
Public proof-of-concept exploits
References
- search.abb.com/library/Download.aspx (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-2625?
- CVE-2023-2625 is a critical-severity vulnerability in Abb Txpert Hub Coretec 4, classified under OS Command Injection. CVSS score: 9.0/10. Published 2023-06-28.
- How severe is CVE-2023-2625?
- Critical severity. CVSS v3 base score is 9.0 out of 10.
- Is CVE-2023-2625 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.