NetSight
IP …
medium5.3Public exploit code

CVE-2023-1258

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footpr…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

Affected products

VendorProductAffected versions
AbbFlow-X\/M Firmware
through 3.2.6
AbbFlow-X\/C Firmware
through 3.2.6
AbbFlow-X\/K Firmware
through 3.2.6
AbbFlow-X\/S Firmware
through 3.2.6
AbbFlow-X\/P Firmware
through 3.2.6
AbbFlow-X R Firmware
through 3.2.6
AbbFlow-X\/T Firmware
through 3.2.6
AbbFlow-X\/Web Firmware
through 3.2.6

Weakness classification

CWE-200

References