CVE-2023-3321 — Code Execution through Writable Mosquitto Configuration File

Description (CNA)

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.

Affected (CNA)

Vendor / product	Versions
ABB / ABB Ability™ zenon	affected 11 build through 11 build 106404

CWE

CWE-15

References

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001801&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.194142766.2067879716.1690216773-1911411808.1686627590

ADP enrichment

CVE

No English description supplied.

https://search.abb.com/library/Download.aspx?DocumentID=2NGA001801&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.194142766.2067879716.1690216773-1911411808.1686627590

CISA-ADP

No English description supplied.

No references supplied.