Description
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Aveva | PI Server | 2023, ≤ 2018 SP3 P05 | — |
Advisories 3
- WID-SEC-2024-1087 Rockwell Automation FactoryTalk Historian SE: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · May 9, 2024
- ICSA-24-130-01 Rockwell Automation FactoryTalk Historian SE CISA ICS & IT advisories · May 9, 2024
- ICSA-24-018-01 AVEVA PI Server CISA ICS & IT advisories · Jan 18, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-018-01 government-resource