InTouch vulnerabilities

3 known vulnerabilities in InTouch from AVEVA. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  SuiteLink Server: Allocation of Resources Without Limits or Throttling

  CVE-2024-7113Aug 13, 2024AVEVA

  If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.

• 7.1 High severity

  SystemPlatform: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2023-34982Nov 15, 2023AVEVA

  This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

• 7.8 High severity

  SystemPlatform: Execution with Unnecessary Privileges

  CVE-2023-33873Nov 15, 2023AVEVA

  This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.