Vulnerabilities > CVE-2023-1258 - Unspecified vulnerability in ABB products

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

abb

NVD

Published: 2023-03-31

Updated: 2024-11-21

Summary

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

Vulnerable Configurations

Part	Description	Count
OS	Abb ABB Flow X/M Firmware - ABB Flow X/M Firmware 3.2.6 ABB Flow X/C Firmware - ABB Flow X/C Firmware 3.2.6 ABB Flow X/K Firmware - ABB Flow X/K Firmware 3.2.6 ABB Flow X/S Firmware - ABB Flow X/S Firmware 3.2.6 ABB Flow X/P Firmware - ABB Flow X/P Firmware 3.2.6 ABB Flow X R Firmware - ABB Flow X R Firmware 3.2.6 ABB Flow X/T Firmware - ABB Flow X/T Firmware 3.2.6 ABB Flow X/Web Firmware - ABB Flow X/Web Firmware 3.2.6	16
Hardware	Abb ABB Flow X/M - ABB Flow X/C - ABB Flow X/K - ABB Flow X/S - ABB Flow X/P - ABB Flow X R - ABB Flow X/T - ABB Flow X/Web -	8

Summary

Vulnerable Configurations

References