Skip to content
OpenAdvisories
High ICSA-24-163-02 1 CVE

AVEVA PI Web API

Published Jun 11, 2024 · Updated Jun 11, 2024

Vendor: AVEVA Product: PI Web API

Summary

Successful exploitation of this vulnerability could allow an attacker to perform remote code execution.

Vulnerabilities 1

  • High 8.4
    CVE-2024-3468

    Deserialization of Untrusted Data in AVEVA PI Web API

    There is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment under the privileges of an interactive user that was socially engineered to use API XML import functionality with content supplied by an atta…

    AVEVA PI Web API

Revision history

  1. #1

    Initial Publication

References