What is CVE-2023-3322?

CVE-2023-3322 is a high-severity vulnerability in Abb Ability™ Zenon, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.0/10. Published 2023-07-24.

How severe is CVE-2023-3322?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Abb Ability™ Zenon

CVE-2023-3322

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabil…

EPSS: 0.003 (18.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Abb Ability™ Zenon — versions 11 build
Abb Zenon

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

cybersecurity@ch.abb.com (Technical Description, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2023-3322?: CVE-2023-3322 is a high-severity vulnerability in Abb Ability™ Zenon, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.0/10. Published 2023-07-24.
How severe is CVE-2023-3322?: High severity. CVSS v3 base score is 7.0 out of 10.