MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-34982

CVSS 5.5v3.1pub. 2023-11-15upd. 2024-11-21

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

  • Aveva Batch Management

    APP
    Aveva
    2020< 2020

  • Aveva Communication Drivers

    APP
    Aveva
    2020< 2020

  • Aveva Edge

    APP
    Aveva
    ≤ 20.1.101

  • Aveva Enterprise Licensing

    APP
    Aveva
    ≤ 3.7.002

  • Aveva Historian

    APP
    Aveva
    2020< 2020

  • Aveva Intouch

    APP
    Aveva
    2020< 2020

  • Aveva Manufacturing Execution System

    APP
    Aveva
    2020< 2020

  • Aveva Mobile Operator

    APP
    Aveva
    2020< 2020

  • Aveva Plant Scada

    APP
    Aveva
    2020< 2020

  • Aveva Recipe Management

    APP
    Aveva
    2020< 2020

  • Aveva System Platform

    APP
    Aveva
    2020< 2020

  • Aveva Telemetry Server

    APP
    Aveva
    2020r2

  • Aveva Work Tasks

    APP
    Aveva
    2020< 2020
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-42796CRITICAL9.8PL ✓same product

AVEVA Edge: nieuwierzytelnione zdalne wykonanie poleceń (RCE) w ExecuteCommand()

CVE-2023-1256CRITICAL9.8PL ✓same product

Nieprawidłowa autoryzacja w AVEVA Plant SCADA i Telemetry Server

CVE-2018-17914CRITICAL9.8PL ✓same product

RCE bez uwierzytelnienia w Aveva InduSoft Web Studio i InTouch Edge HMI

CVE-2018-17916CRITICAL9.8PL ✓same product

Stack-based buffer overflow i RCE w Aveva InduSoft Web Studio i InTouch Edge HMI

CVE-2023-6132HIGH7.3same product

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arb...