CVE-2023-3321highCWE-15

CVE-2023-3321: high-severity vulnerability in ABB Ability™ zenon

Code Execution through Writable Mosquitto Configuration File

Published · Updated

Follow this CVE+ Monitor ABB Ability™ zenon

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 0.4%
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
ABB · ABB Ability™ zenon
Related CVEs — ABB Ability™ zenon

In the same product, most dangerous first.

CVE-2023-3324MEDIUM Insecure deserialization in zenon internal DLLsEPSS 0.3%CVE-2023-3322HIGH Code Execution through overwriting service executable in utilities directoryEPSS 0.3%CVE-2023-3323MEDIUM Code Execution through overwriting project file on zenon engineering studio systemEPSS 0.3%