Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

aveva plant scada vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2023-1256
The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.
Aveva Telemetry Server 2020r2Aveva Aveva Plant Scada 2020r2Aveva Aveva Plant Scada 2023
9.9
CVSSv3
CVE-2022-1467
Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. ...
Aveva Plant Scada Access AnywhereAveva Intouch Access Anywhere
7.8
CVSSv3
CVE-2023-33873
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.
Aveva System Platform 2020Aveva Manufacturing Execution System 2020Aveva Mobile Operator 2020Aveva Work Tasks 2020Aveva Telemetry Server 2020r2Aveva System PlatformAveva Historian 2020Aveva HistorianAveva Intouch 2020Aveva IntouchAveva Enterprise LicensingAveva Recipe ManagementAveva Recipe Management 2020Aveva Manufacturing Execution SystemAveva Batch Management 2020Aveva Batch ManagementAveva Communication DriversAveva Communication Drivers 2020Aveva Mobile OperatorAveva Plant ScadaAveva Plant Scada 2020Aveva Work Tasks
7.1
CVSSv3
CVE-2023-34982
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Aveva System Platform 2020Aveva Manufacturing Execution System 2020Aveva Mobile Operator 2020Aveva Work Tasks 2020Aveva Telemetry Server 2020r2Aveva System PlatformAveva Historian 2020Aveva HistorianAveva Intouch 2020Aveva IntouchAveva Enterprise LicensingAveva Recipe ManagementAveva Recipe Management 2020Aveva Manufacturing Execution SystemAveva Batch Management 2020Aveva Batch ManagementAveva Communication DriversAveva Communication Drivers 2020Aveva Mobile OperatorAveva Plant ScadaAveva Plant Scada 2020Aveva Work Tasks
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook