CVE-2023-2625: Abb Txpert Hub Coretec 4 Firmware

High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.

Affected products

• Abb Txpert Hub Coretec 4 Firmware: before 3.0.1 (fixed in 3.0.1)

Published 2023-06-28. Last modified 2026-06-17.