Aveva vulnerabilities, page 4
91 vulnerabilities
Known vulnerabilities in Aveva products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 68 products.
CriticalCVE-2011-3143aveva · clearscada +2 moreaveva clearscadaUse-after-free vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified long strings that trigger heap memory corruption.EPSS7.51%MediumCVE-2011-3144aveva · clearscada +2 moreaveva clearscadaCross-site scripting (XSS) vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.EPSS2.51%HighCVE-2017-9962aveva · clearscada +1 moreaveva clearscadaSchneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications to cause unexpected behavior. Client applications affected include ViewX and the Server Icon.EPSS1.03%MediumCVE-2017-5160aveva · wonderware_intouch_access_anywhereaveva wonderware_intouch_access_anywhereAn Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The software will connect via Transport Layer Security without verifying the peer's SSL certificate properly.EPSS0.55%CriticalCVE-2017-5158aveva · wonderware_intouch_access_anywhereaveva wonderware_intouch_access_anywhereAn Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified.EPSS2.42%HighCVE-2017-5156aveva · wonderware_intouch_access_anywhereaveva wonderware_intouch_access_anywhereA Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user.EPSS0.96%HighCVE-2017-6021aveva · clearscada +2 moreaveva clearscadaIn Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, and 2015 R2 (build 77.5882) and prior, an attacker with network access to the ClearSCADA server can send specially crafted sequences of commands and data packets to the ClearSCADA server that can cause the ClearSCADA server process and ClearSCADA communications driver processes to terminate. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).EPSS1.67%HighCVE-2024-7113aveva · application server +5 moreAllocation of Resources Without Limits or Throttling in AVEVA SuiteLink ServerIf exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.EPSS0.50%HighCVE-2024-6619aveva · reports for operations 2023 +1 moreIncorrect Permission Assignment for Critical Resource in Ocean Data Systems Dream ReportIn Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could cause a denial-of-service.EPSS0.14%HighCVE-2024-6456aveva · historian web serverSQL Injection vulnerability in AVEVA Historian ServerAVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.EPSS0.42%HighCVE-2024-6618aveva · reports for operations +1 morePath Traversal in Ocean Data Systems Dream ReportIn Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL).EPSS0.30%HighCVE-2024-3468aveva · pi web apiDeserialization of Untrusted Data in AVEVA PI Web APIThere is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment under the privileges of an interactive user that was socially engineered to use API XML import functionality with content supplied by an attacker.EPSS0.42%HighCVE-2024-3467aveva · pi_asset_framework_clientDeserialization of Untrusted Data in AVEVA PI Asset Framework ClientThere is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.EPSS0.19%HighCVE-2019-13537aveva · iec870ip_firmware +1 moreaveva iec870ip_firmwareThe IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCADA and Schneider Electric’s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.EPSS1.30%HighCVE-2019-10981aveva · aveva vijeo citect and citectscada +2 moreaveva aveva vijeo citect and citectscadaIn Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials.EPSS0.38%HighCVE-2019-6525aveva · wonderware_system_platformaveva wonderware_system_platformAVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could make use of an API to obtain the credentials for this account.EPSS1.34%CriticalCVE-2019-6543aveva · indusoft_web_studio +2 moreaveva indusoft_web_studioAVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine.EPSS17.29%HighCVE-2019-6545aveva · indusoft_web_studio +2 moreaveva indusoft_web_studioAVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unauthenticated remote user could use a specially crafted database connection configuration file to execute an arbitrary process on the server machine.EPSS13.86%MediumCVE-2026-1495aveva · pi to connect agentInsertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT AgentThe vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server.EPSS0.13%HighCVE-2026-1507aveva · pi data archive pi serverUncaught Exception vulnerability in AVEVA PI Data ArchiveThe affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service.EPSS0.33%