Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

aveva intouch 2020 - vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2023-33873
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.
Aveva System Platform 2020Aveva Manufacturing Execution System 2020Aveva Mobile Operator 2020Aveva Work Tasks 2020Aveva Telemetry Server 2020r2Aveva System PlatformAveva Historian 2020Aveva HistorianAveva Intouch 2020Aveva IntouchAveva Enterprise LicensingAveva Recipe ManagementAveva Recipe Management 2020Aveva Manufacturing Execution SystemAveva Batch Management 2020Aveva Batch ManagementAveva Communication DriversAveva Communication Drivers 2020Aveva Mobile OperatorAveva Plant ScadaAveva Plant Scada 2020Aveva Work Tasks
7.1
CVSSv3
CVE-2023-34982
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Aveva System Platform 2020Aveva Manufacturing Execution System 2020Aveva Mobile Operator 2020Aveva Work Tasks 2020Aveva Telemetry Server 2020r2Aveva System PlatformAveva Historian 2020Aveva HistorianAveva Intouch 2020Aveva IntouchAveva Enterprise LicensingAveva Recipe ManagementAveva Recipe Management 2020Aveva Manufacturing Execution SystemAveva Batch Management 2020Aveva Batch ManagementAveva Communication DriversAveva Communication Drivers 2020Aveva Mobile OperatorAveva Plant ScadaAveva Plant Scada 2020Aveva Work Tasks
7.5
CVSSv3
CVE-2022-23854
AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.
Aveva Intouch Access Anywhere 2020Aveva Intouch Access Anywhere
5.5
CVSSv3
CVE-2021-32942
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.
Aveva Intouch 2020 -Aveva Intouch 2020 R2Aveva Intouch 2017 -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
firmwareCVE-2023-52866CVE-2024-4367CVE-2024-1721CVE-2023-34992XML injectionCVE-2023-52817SQLCVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook