Skip to content
OpenAdvisories
High ICSA-24-130-01 2 CVEs

Rockwell Automation FactoryTalk Historian SE

Published May 9, 2024 · Updated May 9, 2024

Vendor: Rockwell Automation Product: FactoryTalk Historian SE

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Vulnerabilities 2

  • High 7.5
    CVE-2023-34348

    Improper Check or Handling of Exceptional Conditions in Aveva PI Server

    AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.

    AVEVA PI Server
  • Medium 5.3
    CVE-2023-31274

    Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server

    AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive eve…

    AVEVA PI Server

Revision history

  1. #1

    Initial Publication

References