RCE in Abb Txpert Hub Coretec 4
CVE-2023-2625
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.005 (38.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Abb Txpert_hub_coretec_4
- Abb Txpert_hub_coretec_4_firmware
- Hitachi Energy Txpert Hub Coretec 4 — versions TXpert Hub CoreTec 4 version 2.0.*, TXpert Hub CoreTec 4 version 2.1.*, TXpert Hub CoreTec 4 version 2.2.*
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cybersecurity@hitachienergy.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-2625?
- CVE-2023-2625 is a critical-severity vulnerability in Abb Txpert Hub Coretec 4, classified under OS Command Injection. CVSS score: 9.0/10. Published 2023-06-28.
- How severe is CVE-2023-2625?
- Critical severity. CVSS v3 base score is 9.0 out of 10.
- Is CVE-2023-2625 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.