Flow-X Firmware Vulnerability Advisory (CVE-2023-1258)
This ABB Cyber Security Advisory details a medium-risk vulnerability (CVE-2023-1258) in Flow-X firmware versions up to 3.2.6, where sensitive information such as authorized usernames and device details can be exposed to unauthenticated users via the web API. It recommends mitigations including operating in secure networks, using HTTPS, and updating to firmware version 3.1.0 or later, with a complete fix planned for version 4.0.0 in Q3 2024.
Failed to load PDF
Download insteadYou might also like
83342-500 ABB Welcome IP-Gateway Operating Instructions
46 pages
AC 800M Extended Control Software Binary and Analog Handling Manual
434 pages
ABB Jokab Safety SSR10 Motor Control Schematic
2 pages
ABB M1M 20 Power Meter Installation and Commissioning Manual
2 pages
EF65 Electronic Overload Relay Installation and Operating Instructions
2 pages
S2C-H11R Auxiliary Switch Installation Warning
1 pages
ACS480-04 China RoHS II Conformity Declaration
2 pages
US/U 2.2 Universal Interface Installation and Operating Instructions
2 pages
CM-IVN Coupling Unit for CM-IWN.1 Insulation Monitoring Relay Installation Instructions
6 pages
ABB i-bus KNX HCC/S 2.2.2.1 Heating/Cooling Circuit Controller Technical Data
13 pages