Vulnerability in Abb Ability™ Zenon
CVE-2023-3323
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (20.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 20th percentile — 20.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Abb Ability™ Zenon — versions 11 build
- Abb Zenon
Weakness classification (CWE)
References
- search.abb.com/library/Download.aspx (Technical Description, Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-3323?
- CVE-2023-3323 is a medium-severity vulnerability in Abb Ability™ Zenon, classified under Incorrect Default Permissions. CVSS score: 5.9/10. Published 2023-07-24.
- How severe is CVE-2023-3323?
- Medium severity. CVSS v3 base score is 5.9 out of 10.