Flow-X Firmware Vulnerability Advisory (CVE-2023-1258)

This ABB Cyber Security Advisory details a medium-risk vulnerability (CVE-2023-1258) in Flow-X firmware versions up to 3.2.6, where sensitive information such as authorized usernames and device details can be exposed to unauthenticated users via the web API. It recommends mitigations including operating in secure networks, using HTTPS, and updating to firmware version 3.1.0 or later, with a complete fix planned for version 4.0.0 in Q3 2024.