Aveva Schwachstellen

Zeitverlauf

Typ

Not Defined	35
Hardware Driver Software	6
SCADA Software	4
Log Management Software	2

Produkt

AVEVA System Platform	12
AVEVA Edge	10
AVEVA eDNA Enterprise Data Historian	8
AVEVA InTouch	7
AVEVA Historian	6

Massnahmen

Official Fix	25
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	21

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	45

Zugriffsart

Not Defined	0
Physical	0
Local	5
Adjacent	1
Network	41

Authentisierung

Not Defined	0
High	3
Low	14
None	30

Benutzeraktivität

Not Defined	0
Required	4
None	43

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	5
≤7	6
≤8	16
≤9	12
≤10	5

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	5
≤7	6
≤8	18
≤9	13
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	6
≤7	3
≤8	24
≤9	6
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	1
≤10	9

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	9
≤9	2
≤10	1

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	3

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	3

Exploit 0-day

<1k	4
<2k	20
<5k	23
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	43
<2k	3
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (23): Batch Management (6), Communication Drivers Pack (6), Data Acquisition Server (6), Edge (10), Enterprise Data Management Web (3), Historian (6), InTouch (7), InTouch Access Anywhere (2), InTouch Edge HMI (2), InTouch Machine Edition v2017 (1), InTouch Runtime (1), InduSoft Web Studio (3), MES (6), Operations Control Logger (2), Operations Integration Core (6), PI Server (2), Plant SCADA (1), Plant SCADA Access Anywhere (1), Platform Common Services (1), System Platform (12), Telemetry Server (1), Wonderware System Platform (1), eDNA Enterprise Data Historian (8)

Veröffentlicht	Base	Temp	Schwachstelle	Prod	Aus	Mas	EPSS	CTI	CVE
01.02.2024	7.8	7.5	AVEVA Edge erweiterte Rechte	Unbekannt	Not Defined	Official Fix	0.00043	0.04	CVE-2023-6132
18.01.2024	5.3	5.3	AVEVA PI Server Message Subsystem Denial of Service	Unbekannt	Not Defined	Not Defined	0.00052	0.04	CVE-2023-31274
18.01.2024	7.5	7.5	AVEVA PI Server Denial of Service	Unbekannt	Not Defined	Not Defined	0.00052	0.04	CVE-2023-34348
14.11.2023	5.5	5.4	AVEVA Operations Control Logger erweiterte Rechte	Log Management Software	Not Defined	Official Fix	0.00042	0.00	CVE-2023-34982
14.11.2023	7.8	7.6	AVEVA Operations Control Logger erweiterte Rechte	Log Management Software	Not Defined	Official Fix	0.00042	0.00	CVE-2023-33873
16.03.2023	9.8	9.6	AVEVA Plant SCADA/Telemetry Server erweiterte Rechte	SCADA Software	Not Defined	Official Fix	0.00175	0.00	CVE-2023-1256
11.12.2022	6.4	6.3	AVEVA InTouch Access Anywhere Directory Traversal	Unbekannt	Not Defined	Official Fix	0.76369	0.04	CVE-2022-23854
24.11.2022	5.3	5.1	AVEVA Edge Information Disclosure	Unbekannt	Not Defined	Official Fix	0.00096	0.00	CVE-2021-42797
24.11.2022	9.8	9.4	AVEVA Edge StADOSvr.exe erweiterte Rechte	Unbekannt	Not Defined	Official Fix	0.00091	0.00	CVE-2021-42796
24.11.2022	4.3	4.1	AVEVA Edge Information Disclosure	Unbekannt	Not Defined	Official Fix	0.00060	0.02	CVE-2021-42794

37 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 37 results.

◂ ZurückÜbersichtWeiter ▸

Do you need the next level of professionalism?

Upgrade your account now!