ICSA-24-018-01

icsaUScisa_csaf_ot

AVEVA PI Server

view advisory published 2024-01-18

Successful exploitation of these vulnerabilities could allow an attacker to crash the product being accessed or throttle the memory leading to a partial denial-of-service condition.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-34348UShigh7.5—
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server…
CVE-2023-31274USmedium5.3—
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consu…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationPI Server

    AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected products should apply security updates as soon as possible.

  • MitigationPI Server

    AVEVA recommends that organizations evaluate the impact of these vulnerabilities based on their operational environment, architecture, and product implementation. Customers using affected products should apply security updates as soon as possible.

  • FixedPI Server

    All affected versions can be fixed by upgrading to AVEVA PI Server version 2023 Patch 1 or later. From OSI Soft Customer Portal, search for "PI Server" and select version "2023 Patch 1".

    https://my.osisoft.com/
  • FixedPI Server

    All affected versions can be fixed by upgrading to AVEVA PI Server version 2023 Patch 1 or later. From OSI Soft Customer Portal, search for "PI Server" and select version "2023 Patch 1".

    https://my.osisoft.com/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan