CVE-2023-34982: aveva batch management +12 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-34982

CVSS 7.1 · High EPSS 0,22%

Kerentanan External Control of File Name or Path pada aveva batch management, aveva communication drivers +11 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

Rincian

Terbit di NVD: 15 November 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-73: External Control of File Name or Path
CWE-610: Externally Controlled Reference to a Resource in Another Sphere
EPSS (30 hari): 0,22% peluang dieksploitasi; lebih tinggi dari 11,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
aveva	batch management	Semua versi sebelum 2020
aveva	batch management	Versi 2020
aveva	batch management	Versi 2020 sp1
aveva	communication drivers	Semua versi sebelum 2020
aveva	communication drivers	Versi 2020
aveva	communication drivers	Versi 2020 r2
aveva	communication drivers	Versi 2020 r2_p01
aveva	edge	Semua versi hingga 20.1.101
aveva	enterprise licensing	Semua versi hingga 3.7.002
aveva	historian	Semua versi sebelum 2020
aveva	historian	Versi 2020
aveva	historian	Versi 2020 r2
aveva	historian	Versi 2020 r2_p01
aveva	intouch	Semua versi sebelum 2020
aveva	intouch	Versi 2020
aveva	intouch	Versi 2020 r2
aveva	intouch	Versi 2020 r2_p01
aveva	manufacturing execution system	Semua versi sebelum 2020
aveva	manufacturing execution system	Versi 2020
aveva	manufacturing execution system	Versi 2020 p01
aveva	mobile operator	Semua versi sebelum 2020
aveva	mobile operator	Versi 2020
aveva	mobile operator	Versi 2020 r1
aveva	plant scada	Semua versi sebelum 2020
aveva	plant scada	Versi 2020
aveva	plant scada	Versi 2020 r2
aveva	recipe management	Semua versi sebelum 2020
aveva	recipe management	Versi 2020
aveva	recipe management	Versi 2020 update_1_patch_2
aveva	system platform	Semua versi sebelum 2020
aveva	system platform	Versi 2020
aveva	system platform	Versi 2020 r2
aveva	system platform	Versi 2020 r2_p01
aveva	telemetry server	Versi 2020r2
aveva	telemetry server	Versi 2020r2 sp1
aveva	work tasks	Semua versi sebelum 2020
aveva	work tasks	Versi 2020
aveva	work tasks	Versi 2020 update_1
aveva	work tasks	Versi 2020 update_2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.aveva.com/en/support-and-success/cyber-security-updates/ advisory vendor
https://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01 advisory pihak ketiga · pemerintah AS

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.