Description
The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | AVEVA Edge | ≤ 2020 R2 SP2 | — |
Advisories 2
- SEVD-2024-226-02 EcoStruxure™ Machine SCADA Expert / BLUE Open Studio Schneider Electric CPCERT · Aug 13, 2024
- ICSA-24-032-03 AVEVA Edge products (formerly known as InduSoft Web Studio) CISA ICS & IT advisories · Feb 1, 2024