$ cve CVE-2023-1258 JSON

CVE-2023-1258 EXPLOIT

5.3

MEDIUM · CVSS 3.1 · EPSS 3.9% (pctl 90)

Patch early

A public exploit exists.

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

Scoring

CVSS	5.3 (MEDIUM, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS	3.88% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-200
On CISA KEV	no
Public exploit	yes
Published	2023-03-31
Last modified	2026-06-17

Affected (16)

Vendor	Product
abb	flow-x r
abb	flow-x r firmware
abb	flow-x\/c
abb	flow-x\/c firmware
abb	flow-x\/k
abb	flow-x\/k firmware
abb	flow-x\/m
abb	flow-x\/m firmware
abb	flow-x\/p
abb	flow-x\/p firmware
abb	flow-x\/s
abb	flow-x\/s firmware
abb	flow-x\/t
abb	flow-x\/t firmware
abb	flow-x\/web
abb	flow-x\/web firmware

Public exploits

Source	Title	Date
exploit-db	ABB FlowX v4.00 - Exposure of Sensitive Information	2023-07-19

References

→ the Explorer · watch your stack · NVD