Aveva Vulnerabilidad

Cronología

Escribe

Not Defined	35
Hardware Driver Software	6
SCADA Software	4
Log Management Software	2

Producto

AVEVA System Platform	12
AVEVA Edge	10
AVEVA eDNA Enterprise Data Historian	8
AVEVA InTouch	7
AVEVA Historian	6

Contramedidas

Official Fix	25
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	21

Explotabilidad

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	45

Vector de acceso

Not Defined	0
Physical	0
Local	5
Adjacent	1
Network	41

Autenticación

Not Defined	0
High	3
Low	14
None	30

La interacción del usuario

Not Defined	0
Required	4
None	43

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	5
≤7	6
≤8	16
≤9	12
≤10	5

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	5
≤7	6
≤8	18
≤9	13
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	6
≤7	3
≤8	24
≤9	6
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	1
≤10	9

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	9
≤9	2
≤10	1

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	3

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	3

Explotar día 0

<1k	4
<2k	20
<5k	23
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	46
<2k	0
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (23): Batch Management (6), Communication Drivers Pack (6), Data Acquisition Server (6), Edge (10), Enterprise Data Management Web (3), Historian (6), InTouch (7), InTouch Access Anywhere (2), InTouch Edge HMI (2), InTouch Machine Edition v2017 (1), InTouch Runtime (1), InduSoft Web Studio (3), MES (6), Operations Control Logger (2), Operations Integration Core (6), PI Server (2), Plant SCADA (1), Plant SCADA Access Anywhere (1), Platform Common Services (1), System Platform (12), Telemetry Server (1), Wonderware System Platform (1), eDNA Enterprise Data Historian (8)

Fecha de publicación	Base	Temp	Vulnerabilidad	Prod	Exp	Con	EPSS	CTI	CVE
2024-02-01	7.8	7.5	AVEVA Edge escalada de privilegios	Desconocido	Not Defined	Official Fix	0.00043	0.06	CVE-2023-6132
2024-01-18	5.3	5.3	AVEVA PI Server Message Subsystem denegación de servicio	Desconocido	Not Defined	Not Defined	0.00052	0.04	CVE-2023-31274
2024-01-18	7.5	7.5	AVEVA PI Server denegación de servicio	Desconocido	Not Defined	Not Defined	0.00052	0.04	CVE-2023-34348
2023-11-14	5.5	5.4	AVEVA Operations Control Logger escalada de privilegios	Log Management Software	Not Defined	Official Fix	0.00042	0.00	CVE-2023-34982
2023-11-14	7.8	7.6	AVEVA Operations Control Logger escalada de privilegios	Log Management Software	Not Defined	Official Fix	0.00042	0.02	CVE-2023-33873
2023-03-16	9.8	9.6	AVEVA Plant SCADA/Telemetry Server escalada de privilegios	SCADA Software	Not Defined	Official Fix	0.00175	0.00	CVE-2023-1256
2022-12-11	6.4	6.3	AVEVA InTouch Access Anywhere directory traversal	Desconocido	Not Defined	Official Fix	0.72326	0.04	CVE-2022-23854
2022-11-24	5.3	5.1	AVEVA Edge divulgación de información	Desconocido	Not Defined	Official Fix	0.00096	0.00	CVE-2021-42797
2022-11-24	9.8	9.4	AVEVA Edge StADOSvr.exe escalada de privilegios	Desconocido	Not Defined	Official Fix	0.00091	0.00	CVE-2021-42796
2022-11-24	4.3	4.1	AVEVA Edge divulgación de información	Desconocido	Not Defined	Official Fix	0.00060	0.02	CVE-2021-42794

37 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 37 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!