CVE-2023-3321highCWE-15

CVE-2023-3321: falha de alta gravidade em ABB Ability™ zenon

Code Execution through Writable Mosquitto Configuration File

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ABB Ability™ zenon

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7epss 0.4%
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ABB · ABB Ability™ zenon
CVEs relacionadas — ABB Ability™ zenon

No mesmo produto, das mais perigosas para as menos.

CVE-2023-3324MEDIUM Insecure deserialization in zenon internal DLLsEPSS 0.3%CVE-2023-3322HIGH Code Execution through overwriting service executable in utilities directoryEPSS 0.3%CVE-2023-3323MEDIUM Code Execution through overwriting project file on zenon engineering studio systemEPSS 0.3%