CVE-2023-34982
published 2023-11-15CVE-2023-34982: This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on…
PriorityP427high7.1CVSS 3.1
AVLACLPRLUINSUCNIHAH
EPSS
0.22%
12.7th percentile
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| aveva | application_server | <= 2020 R2 SP1 P01 | — |
| aveva | batch_management | < 2020 | 2020 |
| aveva | batch_management | <= 2020 SP1 | — |
| aveva | batch_management | — | — |
| aveva | communication_drivers | < 2020 | 2020 |
| aveva | communication_drivers | — | — |
| aveva | communication_drivers_pack | <= 2020 R2 SP1 | — |
| aveva | edge | <= 20.1.101 | — |
| aveva | enterprise_licensing | <= 3.7.002 | — |
| aveva | historian | < 2020 | 2020 |
| aveva | historian | <= 2020 R2 SP1 P01 | — |
| aveva | historian | — | — |
| aveva | intouch | < 2020 | 2020 |
| aveva | intouch | <= 2020 R2 SP1 P01 | — |
| aveva | intouch | — | — |
| aveva | manufacturing_execution_system | < 2020 | 2020 |
| aveva | manufacturing_execution_system | <= 2020 P01 | — |
| aveva | manufacturing_execution_system | — | — |
| aveva | mobile_operator | < 2020 | 2020 |
| aveva | mobile_operator | <= 2020 R1 | — |
| aveva | mobile_operator | — | — |
| aveva | plant_scada | < 2020 | 2020 |
| aveva | plant_scada | <= 2020 R2 Update 15 | — |
| aveva | plant_scada | — | — |
| aveva | recipe_management | < 2020 | 2020 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
AVEVA Operations Control Logger
cisa_ics·2023-11-14
AVEVA Operations Control Logger
ICS Advisory
##
AVEVA Operations Control Logger
Release DateNovember 14, 2023
Alert CodeICSA-23-318-01
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.8
- ATTENTION: Low attack complexity
- Vendor: AVEVA
- Equipment: Operations Control Logger
- Vulnerabilities: Execution with Unnecessary Privileges, External Control of File Name or Path
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow privilege escalation or denial of service.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
AVEVA has created a security update to address vulnerabilities in the AVEVA Operations Control Logger (formerly known as ArchestrA Logger), impacting the following products:
- AVEVA SystemPlatform: 2020 R2 SP1 P01 and prior
- AVEVA Historian: 2020 R
GHSA
GHSA-rv48-qr4w-frqj: This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System priv
ghsa_unreviewed·2023-11-15
CVE-2023-34982 [MEDIUM] CWE-610 GHSA-rv48-qr4w-frqj: This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System priv
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-11-15
Published