What is CVE-2023-3324?

CVE-2023-3324 is a medium-severity vulnerability in Abb Ability™ Zenon, classified under Deserialization of Untrusted Data. CVSS score: 6.3/10. Published 2023-07-24.

How severe is CVE-2023-3324?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Deserialization in Abb Ability™ Zenon

CVE-2023-3324

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabil…

Vulnerability class: Insecure Deserialization

EPSS: 0.003 (21.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H.

Affected products

Abb Ability™ Zenon — versions 11 build
Abb Zenon

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

cybersecurity@ch.abb.com (Technical Description, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2023-3324?: CVE-2023-3324 is a medium-severity vulnerability in Abb Ability™ Zenon, classified under Deserialization of Untrusted Data. CVSS score: 6.3/10. Published 2023-07-24.
How severe is CVE-2023-3324?: Medium severity. CVSS v3 base score is 6.3 out of 10.