CVE-2024-3467

June 12, 2024, 9:15 p.m.

None
No Score

Description

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.

Product(s) Impacted

Product Versions
AVEVA PI Asset Framework Client
  • []

Weaknesses

Common security weaknesses mapped to this vulnerability.

Timeline

Published: June 12, 2024, 9:15 p.m.
Last Modified: June 12, 2024, 9:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

ics-cert@hq.dhs.gov

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.