CVE-2023-1258

Published: Mar 31, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

Affected (8)

Products: Abb: Flow X/m Firmware, Flow X/c Firmware, Flow X/k Firmware, Flow X/s Firmware, Flow X/p Firmware, Flow X R Firmware, Flow X/t Firmware, Flow X/web Firmware

8 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X/m Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X/m	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X/c Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X/c	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X/k Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X/k	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X/s Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X/s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X/p Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X/p	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X R Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X R	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X/t Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X/t	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Abb Flow X/web Firmware	Up to 3.2.6

Running on/with	Platform Versions
Abb Flow X/web	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html

Source: cybersecurity@ch.abb.com

ExploitThird Party AdvisoryVDB Entry

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch

Source: cybersecurity@ch.abb.com

Vendor Advisory

http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.