CVE-2023-0321

Campbell Scientific dataloggers CR6, CR300, CR800, CR1000 and CR3000 may allow an attacker to download configuration files, which may contain sensitive information about the internal network. From factory defaults, the mentioned datalogges have HTTP and PakBus enabled. The devices, with the default configuration, allow this situation via the PakBus port. The exploitation of this vulnerability may allow an attacker to download, modify, and upload new configuration files.

• CWE-200
• CWE-200

• https://www.hackplayers.com/2023/01/cve-2023-0321-info-sensible-campbell.htmlExploit, Third Party Advisory
• https://www.incibe-cert.es/en/early-warning/ics-advisories/disclosure-sensitive-information-campbell-scientific-productsMitigation, Third Party Advisory
• https://www.hackplayers.com/2023/01/cve-2023-0321-info-sensible-campbell.htmlExploit, Third Party Advisory
• https://www.incibe-cert.es/en/early-warning/ics-advisories/disclosure-sensitive-information-campbell-scientific-productsMitigation, Third Party Advisory

Published

Jan 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0314Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2023-0315Command Injection in GitHub repository froxlor/froxlor prior…8.8
• CVE-2023-0316Path Traversal: '\..\filename' in GitHub repository froxlor/…5.5
• CVE-2023-0317Unprotected Alternate Channel vulnerability in debug console…4.9
• CVE-2023-0319An issue has been discovered in GitLab affecting all version…5.3
• CVE-2023-0320Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2023-0322Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-0323Cross-site Scripting (XSS) - Stored in GitHub repository pim…5.4
• CVE-2023-0324A vulnerability was found in SourceCodester Online Tours & T…9.8
• CVE-2023-0325Uvdesk version 1.1.1 allows an unauthenticated remote attack…6.1
• CVE-2023-0326An issue has been discovered in GitLab DAST API scanner affe…4.3
• CVE-2023-0327A vulnerability was found in saemorris TheRadSystem. It has …6.1