What’s Vulnerable › Vulnerabilities

CVE-2023-1258: Flow-X disclosure of sensitive information to unauthenticated users

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-03-31 · updated 2026-06-17
• Weakness: CWE-200

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

Affected products

• ABB Flow-X/C Firmware: through 3.2.6
• ABB Flow-X/K Firmware: through 3.2.6
• ABB Flow-X/M Firmware: through 3.2.6
• ABB Flow-X/P Firmware: through 3.2.6
• ABB Flow-X/S Firmware: through 3.2.6
• ABB Flow-X/T Firmware: through 3.2.6
• ABB Flow-X/Web Firmware: through 3.2.6
• ABB Flow-X R Firmware: through 3.2.6

References

• http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch
• http://packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.html
• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A9754&LanguageCode=en&DocumentPartId=&Action=Launch

Get alerted when CVE-2023-1258 or the next vulnerability affects your stack