2 lines
6.2 KiB
JSON
2 lines
6.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["web service"],"packageName":"firmware","platforms":["Flow-X embedded hardware"],"product":"Flow-X","vendor":"ABB","versions":[{"lessThan":"4.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"cybersecurity@ch.abb.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x\\/m_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1DCEC272-343C-4D88-9ED6-A3D5DC25A2FB","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x\\/m:-:*:*:*:*:*:*:*","matchCriteriaId":"61233B04-F1F2-4C5B-A260-460D30CFC162","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x\\/c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"406419A5-33DC-489D-A3DC-2736C8C788B3","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x\\/c:-:*:*:*:*:*:*:*","matchCriteriaId":"B4F273C0-E67E-4F69-8F2C-D3F498755DDA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x\\/k_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1A769914-724B-4D91-BF2C-A646EA0FF1A8","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x\\/k:-:*:*:*:*:*:*:*","matchCriteriaId":"A2824256-84EE-45A6-9794-10F4AA580D11","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x\\/s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7C079FE6-59A6-4220-B7FE-7AA47244C39C","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x\\/s:-:*:*:*:*:*:*:*","matchCriteriaId":"15B144BE-2159-48A9-A097-599BDE51E8B2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x\\/p_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"794E908F-D650-4E92-898E-A4FCAD199744","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x\\/p:-:*:*:*:*:*:*:*","matchCriteriaId":"6B7823F0-C4B5-4A8F-8429-58CE14E46CE9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x_r_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C75BB6AE-9113-43AA-AAAC-5D0CE4160F69","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x_r:-:*:*:*:*:*:*:*","matchCriteriaId":"5E5A008E-37C8-46A4-AD6C-3E8BCD555B79","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x\\/t_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2C3CD012-F79D-4D51-85B2-90F10C11E5BE","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x\\/t:-:*:*:*:*:*:*:*","matchCriteriaId":"C96DF884-7DF2-46AB-B5C5-6BB301B030C3","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:abb:flow-x\\/web_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1845A152-6B8A-4B12-82BB-0CBE39D8738E","versionEndIncluding":"3.2.6","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:abb:flow-x\\/web:-:*:*:*:*:*:*:*","matchCriteriaId":"90F9782F-E7B8-45FC-8CBD-316ED3A7D37E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0."}],"id":"CVE-2023-1258","lastModified":"2026-06-17T05:27:29.173","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"cybersecurity@ch.abb.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-1258","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-02-11T18:42:33.492290Z","version":"2.0.3"}}]},"published":"2023-03-31T08:15:06.397","references":[{"source":"cybersecurity@ch.abb.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html"},{"source":"cybersecurity@ch.abb.com","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch"}],"sourceIdentifier":"cybersecurity@ch.abb.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"cybersecurity@ch.abb.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|