Description
The vulnerability, if exploited, could allow an authenticated miscreant
(OS standard user) to tamper with TCL Macro scripts and escalate
privileges to OS system, potentially resulting in complete compromise of
the model application server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AVEVA | Process Optimization | ≤ 2024.1 | — |
Advisories 1
- ICSA-26-015-01 AVEVA Process Optimization CISA ICS & IT advisories · Jan 15, 2026
References
- https://www.aveva.com/en/support-and-success/cyber-security-updates/
- https://softwaresupportsp.aveva.com/en-US/downloads/products/details/a643eaa3-0d85-4fde-ac11-5239e87a68ea
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-015-01.json