Aveva Intouch Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

2020 R24
2014 R2 SP12
20172
2017 Update 12
2017 Update 22

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined12

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined0
Physical0
Local2
Adjacent0
Network12

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined0
High0
Low2
None12

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined0
Required0
None14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤10
≤20
≤30
≤42
≤50
≤60
≤72
≤84
≤96
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤50
≤60
≤72
≤84
≤96
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤10
≤20
≤30
≤42
≤50
≤62
≤70
≤810
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤106

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k2
<2k8
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k14
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Versions (7): 8.1, 8.1 SP1, 2014 R2 SP1, 2017, 2017 Update 1, 2017 Update 2, 2020 R2

PublishedBaseTempVulnerability0dayTodayExpRemCTICVE
12/11/20226.46.3AVEVA InTouch Access Anywhere path traversal$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-23854
05/24/20226.86.8AVEVA InTouch Access Anywhere Language Bar exposure of resource$0-$5k$0-$5kNot DefinedWorkaround0.00CVE-2022-1467
08/23/20217.57.2AVEVA System Platform SuiteLink Server exceptional condition$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32999
08/23/20217.57.2AVEVA System Platform SuiteLink Server null pointer dereference$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32987
08/23/20217.57.2AVEVA System Platform SuiteLink Server null pointer dereference$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32971
08/23/20217.57.2AVEVA System Platform SuiteLink Server null pointer dereference$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32979
08/23/20217.57.2AVEVA System Platform SuiteLink Server null pointer dereference$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32963
08/23/20218.17.7AVEVA System Platform SuiteLink Server heap-based overflow$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32959
06/10/20213.33.3AVEVA InTouch Runtime WindowViewer missing encryption$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2021-32942
02/13/20198.58.4AVEVA InduSoft Web Studio/InTouch Edge HMI Database Connection resource injection$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.02CVE-2019-6545

3 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 3 results.

more entries by Aveva

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!