VULNERABILITY INTELLIGENCE
CVE-2023-3324
CVSS score6.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2023-07-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H
Description
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
Weakness classification
- cybersecurity@ch.abb.com: CWE-502
Primary references
- cybersecurity@ch.abb.com — Mitigation, Technical Description, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Technical Description, Vendor Advisory