CVE-2023-0228: Improper authentication vulnerability in S+ Operations
First published: Thu Mar 02 2023(Updated: )
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.
Credit: cybersecurity@ch.abb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Abb Symphony Plus S\+ Operations | >=2.0<2.1 | |
| Abb Symphony Plus S\+ Operations | >=3.0<3.3 | |
| Abb Symphony Plus S\+ Operations | =2.1 | |
| Abb Symphony Plus S\+ Operations | =2.1-sp2 | |
| Abb Symphony Plus S\+ Operations | =2.2 | |
| Abb Symphony Plus S\+ Operations | =3.3 | |
| Abb Symphony Plus S\+ Operations | =3.3-sp1 | |
| Abb Symphony Plus S\+ Operations | =3.3-sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-0228.
What is the severity level of CVE-2023-0228?
CVE-2023-0228 has a severity level of 8.8 (High).
Which software versions are affected by CVE-2023-0228?
CVE-2023-0228 affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2.
How can I fix the vulnerability in ABB Symphony Plus S+ Operations?
To fix the vulnerability, it is recommended to apply the necessary patches or updates provided by ABB. Please refer to the vendor's advisory for more information.
Where can I find more information about CVE-2023-0228?
You can find more information about CVE-2023-0228 in the ABB security advisory available at https://search.abb.com/library/Download.aspx?DocumentID=7PAA006722&LanguageCode=en&DocumentPartId=&Action=Launch.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/title
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/event
- agent/tags
- agent/description
- agent/first-publish-date
- vendor/abb
- canonical/abb symphony plus s\+ operations
- version/abb symphony plus s\+ operations/2.0
- version/abb symphony plus s\+ operations/3.0
- version/abb symphony plus s\+ operations/2.1
- version/abb symphony plus s\+ operations/2.1-sp2
- version/abb symphony plus s\+ operations/2.2
- version/abb symphony plus s\+ operations/3.3
- version/abb symphony plus s\+ operations/3.3-sp1
- version/abb symphony plus s\+ operations/3.3-sp2