Critical severity9.0NVD Advisory· Published Jun 28, 2023· Updated Jun 17, 2026
CVE-2023-2625
CVE-2023-2625
Description
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.
Affected products
3- cpe:2.3:o:abb:txpert_hub_coretec_4_firmware:*:*:*:*:*:*:*:*Range: <3.0.1
- Range: TXpert Hub CoreTec 4 version 2.0.*
Patches
Vulnerability mechanics
References
1- search.abb.com/library/Download.aspxnvdVendor Advisory
News mentions
0No linked articles in our index yet.