CVEvulnerability

CVE-2023-34982

7.1 HIGH Published 2023-11-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-610, CWE-73

Description

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

Affected configurations

• aveva batch management (< 2020) • aveva batch management 2020 • aveva communication drivers (< 2020) • aveva communication drivers 2020 • aveva edge (<= 20.1.101) • aveva enterprise licensing (<= 3.7.002) • aveva historian (< 2020) • aveva historian 2020 • aveva intouch (< 2020) • aveva intouch 2020 • aveva manufacturing execution system (< 2020) • aveva manufacturing execution system 2020 • aveva mobile operator (< 2020) • aveva mobile operator 2020 • aveva plant scada (< 2020) • aveva plant scada 2020 • aveva recipe management (< 2020) • aveva recipe management 2020 • aveva system platform (< 2020) • aveva system platform 2020 • aveva telemetry server 2020r2 • aveva work tasks (< 2020) • aveva work tasks 2020

Related

Weakness · CWE (2)

  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness
  • CWE-73 External Control of File Name or Path weakness

References