Skip to content
OpenAdvisories
High ICSA-24-163-03 1 CVE

AVEVA PI Asset Framework Client

Published Jun 11, 2024 · Updated Jun 11, 2024

Vendor: AVEVA Product: PI Asset Framework Client

Summary

Successful exploitation of this vulnerability could allow malicious code execution.

Vulnerabilities 1

  • High 7.0
    CVE-2024-3467

    Deserialization of Untrusted Data in AVEVA PI Asset Framework Client

    There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.

    AVEVA PI Asset Framework Client

Revision history

  1. #1

    Initial Publication

References