A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:58
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.0 |
| References | () https://search.abb.com/library/Download.aspx?DocumentID=8DBD000163&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory |
06 Jul 2023, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-78 | |
| First Time |
Abb txpert Hub Coretec 4 Firmware
Abb txpert Hub Coretec 4 Abb |
|
| References | (MISC) https://search.abb.com/library/Download.aspx?DocumentID=8DBD000163&LanguageCode=en&DocumentPartId=&Action=Launch - Vendor Advisory | |
| CPE | cpe:2.3:h:abb:txpert_hub_coretec_4:-:*:*:*:*:*:*:* cpe:2.3:o:abb:txpert_hub_coretec_4_firmware:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.0 |
28 Jun 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-28 17:15
Updated : 2024-11-21 07:58
NVD link : CVE-2023-2625
Mitre link : CVE-2023-2625
CVE.ORG link : CVE-2023-2625
JSON object : View
Products Affected
abb
- txpert_hub_coretec_4
- txpert_hub_coretec_4_firmware
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')