What is CVE-2023-3323?

CVE-2023-3323 is a medium-severity vulnerability in Abb Ability™ Zenon, classified under Incorrect Default Permissions. CVSS score: 5.9/10. Published 2023-07-24.

How severe is CVE-2023-3323?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Abb Ability™ Zenon

CVE-2023-3323

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabil…

EPSS: 0.003 (16.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H.

Affected products

Abb Ability™ Zenon — versions 11 build
Abb Zenon

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cybersecurity@ch.abb.com (Technical Description, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2023-3323?: CVE-2023-3323 is a medium-severity vulnerability in Abb Ability™ Zenon, classified under Incorrect Default Permissions. CVSS score: 5.9/10. Published 2023-07-24.
How severe is CVE-2023-3323?: Medium severity. CVSS v3 base score is 5.9 out of 10.