ICSA-23-318-01

icsaUScisa_csaf_ot

AVEVA Operations Control Logger

view advisory published 2023-11-14

Successful exploitation of these vulnerabilities could allow privilege escalation or denial of service.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-34982UShigh7.1—
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where th…
CVE-2023-33873UShigh7.8—
This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where thes…
02

references

External citations — patches, advisories, analysis.

03

remediations (28)

  • MitigationAVEVA Application Server

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Application Server

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Batch Management

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Batch Management

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Communication Drivers Pack

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Communication Drivers Pack

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Edge (formerly known as Indusoft Web Studio)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Edge (formerly known as Indusoft Web Studio)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Enterprise Licensing (formerly known as License Manager)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Enterprise Licensing (formerly known as License Manager)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Historian

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Historian

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA InTouch

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA InTouch

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Manufacturing Execution System (formerly known as Wonderware MES)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Manufacturing Execution System (formerly known as Wonderware MES)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Plant SCADA (formerly known as Citect)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Plant SCADA (formerly known as Citect)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Recipe Management

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Recipe Management

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA SystemPlatform

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA SystemPlatform

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Telemetry Server

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Telemetry Server

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Worktasks (formerly known as Workflow Management)

    Ensure that Guest or Anonymous local OS accounts are disabled.

  • MitigationAVEVA Worktasks (formerly known as Workflow Management)

    Ensure that Guest or Anonymous local OS accounts are disabled.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan