Skip to content
OpenAdvisories
Critical ICSA-23-073-04 1 CVE

AVEVA Plant SCADA and AVEVA Telemetry Server

Published Mar 29, 2023 · Updated Mar 29, 2023

Vendor: AVEVA Product: Plant SCADA 2023, AVEVA Plant SCADA 2020R2 Product: Telemetry Server 2020 R2

Summary

Successful exploitation of this vulnerability could allow an unauthenticated user to read data, cause a denial of service, and tamper with alarm states.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-1256

    CVE-2023-1256

    The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.

    AVEVA AVEVA Telemetry Server AVEVA Plant SCADA

Revision history

  1. #1

    CSAF Creation Date

References