Medium severity5.3NVD Advisory· Published Mar 31, 2023· Updated Jun 17, 2026

CVE-2023-1258

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Abb/Flow X\/c Firmware
cpe:2.3:o:abb:flow-x\/c_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow X\/k Firmware
cpe:2.3:o:abb:flow-x\/k_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow X\/m Firmware
cpe:2.3:o:abb:flow-x\/m_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow X\/p Firmware
cpe:2.3:o:abb:flow-x\/p_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow X\/s Firmware
cpe:2.3:o:abb:flow-x\/s_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow X\/t Firmware
cpe:2.3:o:abb:flow-x\/t_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow X\/web Firmware
cpe:2.3:o:abb:flow-x\/web_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow X R Firmware
cpe:2.3:o:abb:flow-x_r_firmware:*:*:*:*:*:*:*:*
Range: <=3.2.6
Abb/Flow-Xllm-fuzzy2 versions
<4.0+ 1 more
- (no CPE)range: <4.0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/173610/ABB-FlowX-4.00-Information-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
search.abb.com/library/Download.aspxnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000