Rockwell Automation FactoryTalk Historian SE
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-34348US | high7.5 | — | ||
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server… | ||||
| CVE-2023-31274US | medium5.3 | — | ||
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consu… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-130-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-130-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationFactoryTalk Historian SE
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationFactoryTalk Historian SE
Rockwell Automation has released product updates addressing this vulnerability:
- FixedFactoryTalk Historian SE
FactoryTalk Historian SE: Users using the affected software are encouraged to install FactoryTalk Historian SE version 9.01 or higher as soon as feasible.
- FixedFactoryTalk Historian SE
FactoryTalk Historian SE: Users using the affected software are encouraged to install FactoryTalk Historian SE version 9.01 or higher as soon as feasible.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan