PatchTheCVECVE-2023-3321: A vulnerability exists by allowing low-privileged users to read and update the data in various directories us
CVE-2023-3321 is a high-severity flaw (CVSS 7.0) affecting zenon. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.0 (High) |
| Attack vector | Local |
| Attack complexity | High |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 70%) |
| CISA exploited list | No |
| Weakness | CWE-15 |
| Published | 2023-07-24 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-3321?
zenon: upgrade to newer than 11.0.0. Exact commands for each OS are on this page.
Is CVE-2023-3321 being exploited?
CVE-2023-3321 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-3321 affect?
CVE-2023-3321 affects zenon. Severity is high (CVSS 7.0). A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabili
How urgent is CVE-2023-3321?
Priority 32/100. High severity
Software pages
Related CVEs
- CVE-2023-3324 MEDIUM 6.3 UPGRADE A vulnerability exists by allowing low-privileged users to read and update the data in various directories us
- CVE-2023-3323 MEDIUM 5.9 UPGRADE A vulnerability exists by allowing low-privileged users to read and update the data in various directories us
- CVE-2023-3322 HIGH 7.0 UPGRADE A vulnerability exists by allowing low-privileged users to read and update the data in various directories us
- CVE-2022-34838 HIGH 8.1 UPGRADE Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully
- CVE-2022-34837 MEDIUM 6.2 UPGRADE Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully