CVE-2023-3323
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability exists allowing low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability using specially crafted programs that can run on the installed zenon hosts.
Risk Assessment
This vulnerability may lead to unauthorized access and modification of data, posing a risk to the integrity and confidentiality of information within the system.
Recommendation
It is recommended to restrict access to system directories and to monitor and update the zenon system to the latest version to minimize the risk of exploitation of this vulnerability.
Original NVD description (English source)
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.