CVE-2023-3321

HighCVSS 7.0

Published: 24/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

A vulnerability exists allowing low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability by using specially crafted programs on the installed zenon hosts.

Risk Assessment

This vulnerability may lead to unauthorized access and modification of data, posing a risk to the integrity of the system and the organization's data.

Recommendation

It is recommended to restrict access to system directories and update the Zenon system to the latest version to minimize the risk of exploitation of this vulnerability.

Other vulnerabilities in ABB Ability™ zenon: od wersji 11 do wersji 11 build 106404

CVE-2023-3323Medium
A vulnerability exists allowing low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability using specially crafted programs that can run on the installed zenon hosts.

Original NVD description (English source)

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS