Today > | 3 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-3467

June 12, 2024, 9:15 p.m.

Product(s) Impacted

AVEVA PI Asset Framework Client

Description

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.

Weaknesses

Date

Published: June 12, 2024, 9:15 p.m.

Last Modified: June 12, 2024, 9:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

ics-cert@hq.dhs.gov

References

https://www.cisa.gov/ ics-cert@hq.dhs.gov