Information Disclosure vulnerability in My Control System (on-premise)
CVE-2023-0580

5.4MEDIUM

Key Information:

Vendor

Abb

Status
My Control System (on-premise)
Vendor
CVE Published:
6 April 2023

What is CVE-2023-0580?

The ABB My Control System (On-Premise) is prone to an insecure storage vulnerability that enables attackers to access sensitive application data or seize control of the application. This flaw affects key services within the application, including the User Interface, System Monitoring, and Asset Inventory, posing significant risks to the integrity and confidentiality of sensitive information. Versions 5.0.0 through 5.13 are impacted, highlighting the need for immediate attention and remediation to safeguard application data.

Affected Version(s)

My Control System (on-premise) 5.0;0 <= 5.13

References

https://search.abb.com/library/Download.aspx?DocumentID=7...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.