Manufacturing Execution System vulnerabilities

2 known vulnerabilities in Manufacturing Execution System from AVEVA. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  SystemPlatform: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2023-34982Nov 15, 2023AVEVA

  This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

• 7.8 High severity

  SystemPlatform: Execution with Unnecessary Privileges

  CVE-2023-33873Nov 15, 2023AVEVA

  This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.