VULNERABILITY INTELLIGENCE
CVE-2023-3323
CVSS score5.9 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2023-07-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
Description
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
Weakness classification
- cybersecurity@ch.abb.com: CWE-276
Primary references
- cybersecurity@ch.abb.com — Mitigation, Technical Description, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Technical Description, Vendor Advisory