medium5.5
CVE-2023-34982
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on …
Impact
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aveva | Batch Management | before 2020 Version 2020 |
| Aveva | Communication Drivers | before 2020 Version 2020 |
| Aveva | Edge | through 20.1.101 |
| Aveva | Enterprise Licensing | through 3.7.002 |
| Aveva | Historian | before 2020 Version 2020 |
| Aveva | Intouch | before 2020 Version 2020 |
| Aveva | Manufacturing Execution System | before 2020 Version 2020 |
| Aveva | Mobile Operator | before 2020 Version 2020 |
| Aveva | Plant Scada | before 2020 Version 2020 |
| Aveva | Recipe Management | before 2020 Version 2020 |
| Aveva | System Platform | before 2020 Version 2020 |
| Aveva | Telemetry Server | Version 2020r2 |