Description
AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | Historian Web Server | 2023R2, 2023 – < 2023 P03, 2020 – < 2020 R2 SP1 P01 | 2023 P03 |
Advisories 1
- ICSA-24-228-10 AVEVA Historian Web Server CISA ICS & IT advisories · Aug 15, 2024
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-228-10 government-resource