PT-2023-25082 · Aveva · Application Server+14

Lukasz Piotrowski · Publicado 2023-11-15 · Atualizado 2023-12-08 · CVE-2023-34982

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description This issue could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where the products are installed, resulting in denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-610

CWE-73

Identificadores relacionados

CVE-2023-34982

Produtos afetados

Application Server

Batch Management

Communication Drivers Pack

Edge

Enterprise Licensing

Historian

Intouch

Manufacturing Execution System

Mobile Operator

Plant Scada

Recipe Management

System Platform

Telemetry Server

Worktasks

Communication Drivers

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-34982 · Aviso do Fabricante
• https://aveva.com/en/support-and-success/cyber-security-updates · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-34982 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-318-01 · Nota
• https://t.me/cvenotify/62989 · Publicação no Telegram