CVE-2023-3322

HighCVSS 7.0

Published: 24/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

A vulnerability exists that allows low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability by using specially crafted programs on the installed zenon hosts.

Risk Assessment

This vulnerability could lead to unauthorized access and modification of data, posing a risk to the integrity of the system and the organization's data.

Recommendation

It is recommended to restrict access to system directories and update the Zenon system to the latest version to minimize the risk associated with this vulnerability.

Other vulnerabilities in ABB Ability™ zenon: from 11 build through 11 build 106404

CVE-2023-3324Medium
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.

Original NVD description (English source)

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS