CVE-2023-0321 json
Disclosure of Sensitive Information on Campbell Scientific Products
published 2023-01-25 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-12384
- cvss
- 9.1
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 59%
- public exploits
- 0
- none known
Summary
Campbell Scientific dataloggers CR6, CR300, CR800, CR1000 and CR3000 may allow an attacker to download configuration files, which may contain sensitive information about the internal network. From factory defaults, the mentioned datalogges have HTTP and PakBus enabled. The devices, with the default configuration, allow this situation via the PakBus port. The exploitation of this vulnerability may allow an attacker to download, modify, and upload new configuration files.
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 19 mo ago
Exploit prediction
0.89% chance of exploitation in the next 30 days, higher than 59% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- hackplayers.com https://www.hackplayers.com/2023/01/cve-2023-0321-info-sensible-campbell.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| NVD | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Affected products
- Campbell Scientific CR6
- Campbell Scientific CR300
- Campbell Scientific CR800
- Campbell Scientific CR1000
- Campbell Scientific CR3000
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
hackplayers.com
/2023/01/cve-2023-0321-info-sensible-campbell.html
exploit, third-party-advisory
-
incibe-cert.es
/en/early-warning/ics-advisories/disclosure-sensitive-information-campbell-scientific-products
mitigation, third-party-advisory
Sources
- CVE List CVE-2023-0321
- NVD CVE-2023-0321
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.