Description
AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could make use of an API to obtain the credentials for this account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | Wonderware System Platform | 2017 Update 2 and prior | — |
Advisories 1
- ICSA-19-029-03 AVEVA Wonderware System Platform CISA ICS & IT advisories · Jan 29, 2019